docker-splunk
docker-splunk copied to clipboard
splunk
Feature Request: Add Support for arm/Apple Silicon
I use Splunk docker a lot during development, a native container/build would be really helpful.
once https://github.com/splunk/docker-splunk/pull/509 is complete you should be able to create an ARM compatible build for the universal forwarder to use locally. I have a PR in my forked repo that updates the Makefile so you can build it locally too without using the Github action or using the docker hub images if that is helpful- https://github.com/jnichols3/docker-splunk/pull/5
splunk enterprise has not yet made ARM compatible binaries yet, there is splunk ideas logged for this: https://ideas.splunk.com/ideas/EID-I-515 be sure to log in, vote for that idea and ask about it. I would not be surprised if they drop these during .conf, I'm sure they are getting asked for arm/graviton2 support a lot for anyone running their own splunk on ec2.
+1 Apple Silicon support would be great. Currently I can't run splunk via docker on my MacBook. Even if I add the --platform=linux/arm64 parameter. The container starts but splunkd crashes with a coredump.
Hi, is there any solution for this? I am new to splunk integration with docker. I am not able to run docker pull splunk/splunk on my mac terminal as it throws an error,
% docker pull splunk/splunk:latest latest: Pulling from splunk/splunk no matching manifest for linux/arm64/v8 in the manifest list entries
Is this a compatible issue? Please advise. TIA. I am using a MAC with Apple M1 pro chip.
regarding the dockers images I submitted an idea last year that is still under the threshold. https://ideas.splunk.com/ideas/EID-I-1054
What do you mean by an idea? I click on the link and it is behind a log in wall.
What do you mean by an idea? I click on the link and it is behind a log in wall.
Splunk has a website dedicated to gather community ideas that could be implemented in the core product. You need to login using a Splunk account that you can register for free to access this and other resources from splunk (answers, download splunk trials, etc.)
Every account has 50 points that can be used to vote on ideas posted there (up to 10 points per idea) that with enough vote can end up being developed by Splunk
👋 just ran into this. apple silicon support for the splunk container would be awesome!
I am also running into this, the image crashes even with linux/amd64 virtualization.
@alishamayor Do you know when / if this going to be prioritized anytime soon?
I have actually found that Rosetta 2 will allow Splunk to run on a local install on M1, but the docker image is still broken.
Hi fam, also currently running into the same issue currently using Pro M1 silicon... Is there some resolution around this issue? ERROR: no matching manifest for linux/arm64/v8 in the manifest list entries
Hi Splunk Team, please fix this. I am also needing to run the splunk docker container on an m1 macbook. Tried many forms of forcing the virtualization but it does not work. Please create an arm based container or add support for virtualization
I recently switched to M1 Mac and the lack of ARM support is problematic :grimacing:
+1 to this. My team has to direct work based on who has an Intel or M1 Mac. Would really like to enable everyone to work on integrations with Splunk locally.
