Anyone have a good tutorial on Docker containerizing and upgrading and managing Splunk in a container environment?

[daniel333]

All,

Anyone have a good walk through or tutorial on managing Splunk as a container? Upgrades and not loosing configs? SHC and user local files? Mounting disks for indexers into the container? That sort of thing.

[outcoldman]

@daniel333 I am co-presenter on the link posted below by felipesewaybricker. I left Splunk year ago and co founded https://www.outcoldsolutions.com, our company is specialized on providing Monitoring Solutions for Containers and consulting around Splunk + Containers. I am author of Splunk images, so I know them from the ground. Feel free to shoot me email, especially if your company is looking for professional consulting on this topic.

[felipesewaybric]

wow, nice to meet you, very good presentation, we took lots of useful information and I learned a lot from her.

[outcoldman]

Thank you! Glad that it was useful!

[felipesewaybric · Accepted solution]

I would start with this one:

https://conf.splunk.com/files/2016/slides/how-to-run-splunk-as-a-docker-image.pdf

then customize and even try it on kubernets

[daniel333]

Basically I didn't have my head around the core concepts in docker when it comes to data persistence. Had to stop, do some Docker 101 training then the material above made a lot of sense. Thanks!