rhel7-docker-splunk.md

Dockerfile

# Well ok CENTOS then
FROM centos:7

# Point to your local repository with Splunk(forwarder)s
RUN echo $'[splunk]\n\
name=Splunk\n\
baseurl=http://repo.testlab.local/splunk\n\
enabled=1\n\
gpgcheck=0\n'\
> /etc/yum.repos.d/splunk.repo

# Create init script, first line one to accept license, 2nd to run splunk in the foreground
RUN echo $'#!/bin/bash\n\
/opt/splunk/bin/splunk status --accept-license --answer-yes --no-prompt\n\
/opt/splunk/bin/splunk start --nodaemon'\
> /sbin/myinit.sh && chmod 755 /sbin/myinit.sh

# Install Splunk
RUN yum -y install splunk

# Expose all teh ports
EXPOSE 8000/tcp 8089/tcp 8191/tcp 9997/tcp

WORKDIR /opt/splunk

# Start splunk
CMD ["/sbin/myinit.sh"]

Build

docker build --rm -t local/splunk .

Run

docker run -ti -p 8000:8000 -p 8089:8089 -p 8191:8191 local/splunk