I am trying to customize my Docker image (a Cassandra image) so it also has Splunk Forwarder with Cassandra add-on. Can you please guide how to do so? main issue is downloading headless (both add-on and forwarder)
You can download both add-on and Universal Forwarder installable to a repository accessible from nix servers and then run a script to install both.
In your Dockerfile you can use wget to download the forwarder and the app. You can have it pulldown the tarball version of the splunk binary and you can unpack it by specifying in the Dockerfile. Then for the app you can download that using wget as well and drop it in the $Splunk_Home/etc/apps folder. Alternatively you can build the image on your machine and copy the app from your local machine.
See the official Splunk universal forwarder Dockerfile for inspiration: https://github.com/splunk/docker-splunk/blob/master/universalforwarder/Dockerfile
Exactly what I wanted. What about addons ? they have same static url ? unable to browse so just asking...
@jigarashah - Did the answer provided by @craigv provide a solution to your original question? If yes, please don't forget to resolve this post by clicking "Accept". If no, please leave a comment with more feedback. Thanks!