Splunk Dev

Splunk in docker + UF from windows host

starom
New Member

Hello,

for testing purposes at home I deployed splunk in docker following https://splunk.github.io/docker-splunk/. 

Splunk Enterprise and UF works flawlessly but I would like to get logs from my windows 10 machine into the splunk docker instance. 

Containers are in same network in docker but the host network is different so the windows host UF cant reach Splunk Enterprise. When switching the containers network to host, it doest work at all. 

I am definitely missing something here. Is it event possible to be sending data from host to a docket container real time as i would like to?

My host is windows 10 running Docker with 2 containers - Splunk UF and Splunk Enterprise.

Thank you.

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Splunk Add-on for Microsoft Windows 11.0.3: Parse Once, Search Faster

The updated Splunk Add-on for Microsoft Windows helps customers search Windows events faster by reducing ...

What's New in Splunk Enterprise Security 8.8 and Beyond

Threats move at machine speed. Keeping up should not depend on having the biggest budget, the largest team, or ...

A Four-Part Event Series: State of Observability - Where AI Meets Performance

As AI agents take on more complex tasks, teams need greater visibility into how they behave, what they cost, ...