splunk / docker-splunk

Splunk Docker GitHub Repository
459 stars 253 forks source link

How do I disable SSLconfig? #224

Open 2gavy opened 5 years ago

2gavy commented 5 years ago

I have to manually remove [sslconfig] section in server.conf for my docker image to work properly.

Is there a way to turn off ssl / a way to not generate this config?

bb03 commented 5 years ago

@2gavy Can you provide us with a bit more detail on this. Why did you need to manually remove the sslconfig section?

There is a way to do what you ask. If you look at the splunk-ansible project on this line https://github.com/splunk/splunk-ansible/blob/develop/site.yml#L18 we will run any "pre-setup" plays that you want, before starting splunk. These can be controlled through the environment variable "SPLUNK_ANSIBLE_PRE_TASKS" or through a defaults.yml.

In that play, you would probably need to add a $SPLUNK_HOME/etc/system/local/server.conf file with the values you want.

2gavy commented 5 years ago

Hey @bb03, apologies for the late reply! Let me share a bit on the setup.

I'm running multiple microservices on my k8 cluster through the sidecar approach. Pretty much similar to https://github.com/splunk/docker-splunk/issues/186.

The docker universal forwarder image I'm using can be found here, https://hub.docker.com/r/splunk/universalforwarder/tags

Splunk Enterprise is has been setup (and managed by another team) and I want to push my container logs over to it so monitor my logs from one platform.

There is a constant SSL handshake issue hence I want to turn off ssl