docker-splunk icon indicating copy to clipboard operation
docker-splunk copied to clipboard

Require Linux/ARM64 docker image for  splunk/universalforwarder

Open odidev opened this issue 4 years ago • 11 comments
trafficstars

Hi Team,    

I have been working on building splunk/universalforwarder image for both amd64 and arm64 platforms and I have successfully built all the images for both the platform.

Although, the release process is still not clear. Can you please share the process of how you are releasing the images on your dockerhub account?

Do you have any plans for releasing arm64 images?   If required, I will add and raise PR.

odidev avatar Sep 29 '21 12:09 odidev

Hi @odidev -- currently we're only releasing RHEL-based x86_64 and s390x as the official image architectures that get published on Docker Hub from the Splunk account. We push images to Docker Hub on each official Splunk Enterprise/Universal Forwarder release.

We definitely welcome a PR if you'd like modify the scripts in this repository, but we don't have an estimated delivery date for official ARM images.

alishamayor avatar Oct 15 '21 17:10 alishamayor

@odidev Is it possible to access these images, would be great to be able to use this until there is an official version.

jonathan-s avatar Jan 30 '22 11:01 jonathan-s

@jonathan-s

I have built Docker images for Debian 10 for Linux/arm64 platforms that were available in the docker-splunk repository. You can access them with the link below.

Docker Images link: https://hub.docker.com/repository/docker/odidev/docker-splunk/tags?page=1&ordering=last_updated

odidev avatar Feb 01 '22 12:02 odidev

@odidev Fantastic work, thank you. @alishamayor It would amazing if arm64 builds were made "official".

Richard-Walton avatar Apr 28 '22 21:04 Richard-Walton

@odidev, Hi I tried running the image odidev/docker-splunk:splunk-debian-10. The container starts and it looks like the splunk is starting fine. When go inside the container and check status splunk status

It says that splunkd is running with one PID. And that splunk helpers are runinng with one PID. However when I try: curl -I http://localhost:8000 inside the container I get a connection refused. So it seems like the web app isn't running.

Any clues around what I could be going wrong?

jonathan-s avatar May 01 '22 14:05 jonathan-s

The image is perhaps only the universal forwarder and not the splunk enterprise app...

jonathan-s avatar May 01 '22 14:05 jonathan-s

Hi, bumping this issue. Arm64 devices are becoming more common. It would be really helpful if we at least have a universal forwarder for it.

Practicalbutterfly5 avatar Mar 27 '23 19:03 Practicalbutterfly5

Is this repo just dead? Is anyone looking at this issues?

jnichols3 avatar Jul 10 '23 14:07 jnichols3

Hi, I’m currently working on getting the UI to run on M1 in Docker using the platform: linux/amd64 and it has started working but it may fail unexpectedly...

valenwin avatar Feb 22 '24 08:02 valenwin

just adding on here that it would be really useful to have an official ARM image available

jaydeluca avatar Jul 30 '24 09:07 jaydeluca