Which service is optimal for Splunk docker in AWS

[miburo]

Anyone running Splunk Docker in AWS as part of a dev/test environment?
Wondering which AWS service you found most optimal for this.

[woodcock]

You could get one big machine in AWS and then try out Splunk'N'Box:
https://conf.splunk.com/files/2017/slides/splunk-n-box.pdf
https://github.com/mhassan2/splunk-n-box/blob/master/splunknbox.sh

[woodcock]

For dev/test, why bother with the overhead of Docker; why not just run a Splunk all-in-one directly on free t2.micro instance?

[miburo]

Thanks for the reply,

I'm looking for an environment that I can deploy and spin up and down quickly as part of testing in the CI/CD pipeline. The docker splunk seemed perfect for it though i've hit a few limitations. Do you find it quick to do an all-in-on on t2?

[woodcock]

Yes, I actually wrote a 2-part how-to blog but never published it.