docker-splunk icon indicating copy to clipboard operation
docker-splunk copied to clipboard

9.2.1/9.1.4 hec token not created when providing env var SPLUNK_HEC_TOKEN

Open mkolasinski-splunk opened this issue 10 months ago • 2 comments

Running: docker run -it -e SPLUNK_START_ARGS=--accept-license -e SPLUNK_PASSWORD=**** -e SPLUNK_HEC_TOKEN="testtoken" -p 8100:8000 -p 8188:8088 -p 8189:8089 --platform=linux/amd64 splunk/splunk:9.2.1 start Results in spinning up Splunk container, but HEC token is not created image Issue confirmed on Splunk 9.1.4 as well.

On previous releases of Splunk HEC token is created properly, i.e. on Splunk 9.1.3: docker run -it -e SPLUNK_START_ARGS=--accept-license -e SPLUNK_PASSWORD=**** -e SPLUNK_HEC_TOKEN="testtoken" -p 8000:8000 -p 8088:8088 -p 8089:8089 --platform=linux/amd64 splunk/splunk:9.1.3 start Results in: image

mkolasinski-splunk avatar Apr 22 '24 09:04 mkolasinski-splunk

Same issue when specifying hec in default.yml

dd-Splunk avatar Apr 24 '24 12:04 dd-Splunk

I think this is related to https://github.com/splunk/splunk-ansible/issues/815

ekoyle avatar May 01 '24 19:05 ekoyle