In order customize my Docker image, how should I download and install Splunk Forwarder on *nix systems?

[jigarashah]

I am trying to customize my Docker image (a Cassandra image) so it also has Splunk Forwarder with Cassandra add-on. Can you please guide how to do so? main issue is downloading headless (both add-on and forwarder)

http://docs.splunk.com/Documentation/Splunk/6.5.1/Installation/InstallonLinux

[craigv_splunk · Accepted solution]

In your Dockerfile you can use wget to download the forwarder and the app. You can have it pulldown the tarball version of the splunk binary and you can unpack it by specifying in the Dockerfile. Then for the app you can download that using wget as well and drop it in the $Splunk_Home/etc/apps folder. Alternatively you can build the image on your machine and copy the app from your local machine.

See the official Splunk universal forwarder Dockerfile for inspiration: https://github.com/splunk/docker-splunk/blob/master/universalforwarder/Dockerfile

[jigarashah]

Exactly what I wanted. What about addons ? they have same static url ? unable to browse so just asking...

[vrathore2016]

@craigv https://github.com/splunk/docker-splunk/blob/master/universalforwarder/Dockerfile is not available. Please fix the link

[gjanders]

Now https://github.com/splunk/docker-splunk/blob/master/uf/debian-9/Dockerfile or refer to the more general link of https://github.com/splunk/docker-splunk/

[aaraneta_splunk]

@jigarashah - Did the answer provided by @craigv provide a solution to your original question? If yes, please don't forget to resolve this post by clicking "Accept". If no, please leave a comment with more feedback. Thanks!

[somesoni2]

You can download both add-on and Universal Forwarder installable to a repository accessible from nix servers and then run a script to install both.