All Apps and Add-ons

Splunk Data Science and Deep Learning : Container not starting

Tybe_ytteb
Explorer

Hello everyone, 

I followed steps to install DSDL : https://docs.splunk.com/Documentation/DSDL/5.1.1/User/InstallDSDL and do this scenario here https://www.sidechannel.blog/en/detecting-anomalies-using-machine-learning-on-splunk/

But when I'm trying to start the container : 

Tybe_ytteb_0-1709732376910.png

 

I get 403 error : 

Tybe_ytteb_1-1709732380307.png

  • I checked roles, capabilities 
  • I checked all kind of posts from the community
  • I checked global permissions on DSDL 

Is there a known issue about that ? 

Have a good day all,

Betty

Labels (3)
0 Karma

Gabriel
Path Finder

Hey there,

Have you tried pulling the docker image manually or did you just hit START? If not, try this:

 

1. SSH into your Splunk server

2. Check what docker images are present

 

docker images​

 

3. Pull the latest version of Golden Image CPU image manually from Docker Hub. As of today, its version 5.1.2

 

 

docker pull phdrieger/mltk-container-golden-cpu:5.1.2​

 

4. The image you just pulled should now be visible

 

 

docker images​

 

5. Update the DSDL app to the latest version. As of today, this is 5.1.2

6. Restart or refresh your search head

7. Now try to start the container again

 

 

In case you want any other docker image, here is the official repository where you find all images to every container image that is available in DSDL: https://hub.docker.com/u/phdrieger

Let me know if I can help you any further. 

Tags (3)
0 Karma

Gabriel
Path Finder

Hey Betty

Have you pulled the docker container image (Golden Image CPU) manually or did you just select it from the dropdown and then hit START?

If you did not pull it manually yet, try this first.

  1. SSH into the server where Splunk is installed
  2. Check what docker images are present. I suspect you don't see the docker image phdrieger/mltk-container-golden-cpu yet. This is needet to start a container.

 

docker images

 

  • Pull the latest version (as of today, 5.1.2) of the Golden Image CPU from Docker Hub

 

docker pull phdrieger/mltk-container-golden-cpu​:5.1.2

 

  • You should now see the image you just pulled

 

docker images​

 

  • OPTIONAL STEP: Check if you can start the container you just pulled

 

docker run phdrieger/mltk-container-golden-cpu​:5.1.2

 

  • Update the DSDL app to the latest version (as of today, 5.1.2)
  • Restart or refresh your search head to make sure the news configs of DSDL 5.1.2 are live

 

http://YOURHOST:8000/en-GB/debug/refresh​

 

  • Now try starting a container again.

 

Here are all available docker images in case you want to pull others too: https://hub.docker.com/u/phdrieger 

 

Let me know if I can help you any further.

0 Karma
Get Updates on the Splunk Community!

Unlock New Opportunities with Splunk Education: Explore Our Latest Courses!

At Splunk Education, we’re dedicated to providing top-tier learning experiences that cater to every skill ...

Technical Workshop Series: Splunk Data Management and SPL2 | Register here!

Hey, Splunk Community! Ready to take your data management skills to the next level? Join us for a 3-part ...

Spotting Financial Fraud in the Haystack: A Guide to Behavioral Analytics with Splunk

In today's digital financial ecosystem, security teams face an unprecedented challenge. The sheer volume of ...