Update/splunk enterprise (#10949)

This commit is contained in:
Robert Castley
2026-01-19 13:53:25 +00:00
committed by GitHub
parent 187cd4825e
commit de14cab715
3 changed files with 15 additions and 12 deletions

View File

@@ -10,8 +10,8 @@ var_tags="${var_tags:-monitoring}"
var_cpu="${var_cpu:-4}" var_cpu="${var_cpu:-4}"
var_ram="${var_ram:-8192}" var_ram="${var_ram:-8192}"
var_disk="${var_disk:-40}" var_disk="${var_disk:-40}"
var_os="${var_os:-ubuntu}" var_os="${var_os:-debian}"
var_version="${var_version:-24.04}" var_version="${var_version:-13}"
var_unprivileged="${var_unprivileged:-1}" var_unprivileged="${var_unprivileged:-1}"
header_info "$APP" header_info "$APP"

View File

@@ -12,7 +12,7 @@
"documentation": "https://help.splunk.com", "documentation": "https://help.splunk.com",
"config_path": "", "config_path": "",
"website": "https://www.splunk.com/en_us/download/splunk-enterprise.html", "website": "https://www.splunk.com/en_us/download/splunk-enterprise.html",
"logo": "https://cdn.jsdelivr.net/gh/selfhst/icons@main/webp/splunk.webp", "logo": "https://cdn.jsdelivr.net/gh/selfhst/icons@main/webp/splunk-light.webp",
"description": "Platform for searching, monitoring, and analyzing machine-generated data at scale for operational intelligence and security.", "description": "Platform for searching, monitoring, and analyzing machine-generated data at scale for operational intelligence and security.",
"install_methods": [ "install_methods": [
{ {
@@ -22,8 +22,8 @@
"cpu": 4, "cpu": 4,
"ram": 8192, "ram": 8192,
"hdd": 40, "hdd": 40,
"os": "Ubuntu", "os": "Debian",
"version": "24.04" "version": "13"
} }
} }
], ],

View File

@@ -43,14 +43,17 @@ while true; do
done done
msg_info "Setup Splunk Enterprise" msg_info "Setup Splunk Enterprise"
DOWNLOAD_URL=$(curl -s "https://www.splunk.com/en_us/download/splunk-enterprise.html" | grep -o 'data-link="[^"]*' | sed 's/data-link="//' | grep "https.*products/splunk/releases" | grep "\.deb$") DOWNLOAD_URL=$(curl -s "https://www.splunk.com/en_us/download/splunk-enterprise.html" | grep -o 'data-link="[^"]*' | sed 's/data-link="//' | grep "https.*products/splunk/releases" | grep "linux-amd64\.tgz$")
RELEASE=$(echo "$DOWNLOAD_URL" | sed 's|.*/releases/\([^/]*\)/.*|\1|') RELEASE=$(echo "$DOWNLOAD_URL" | sed 's|.*/releases/\([^/]*\)/.*|\1|')
$STD curl -fsSL -o "splunk-enterprise.deb" "$DOWNLOAD_URL" || { $STD curl -fsSL -o "splunk-enterprise.tgz" "$DOWNLOAD_URL" || {
msg_error "Failed to download Splunk Enterprise from the provided link." msg_error "Failed to download Splunk Enterprise from the provided link."
exit 1 exit 1
} }
$STD dpkg -i "splunk-enterprise.deb" $STD tar -xzf "splunk-enterprise.tgz" -C /opt
rm -f "splunk-enterprise.deb" rm -f "splunk-enterprise.tgz"
addgroup --system splunk
adduser --system --home /opt/splunk --shell /bin/bash --ingroup splunk --no-create-home splunk
chown -R splunk:splunk /opt/splunk
msg_ok "Setup Splunk Enterprise v${RELEASE}" msg_ok "Setup Splunk Enterprise v${RELEASE}"
msg_info "Creating Splunk admin user" msg_info "Creating Splunk admin user"
@@ -62,7 +65,7 @@ ADMIN_PASS=$(openssl rand -base64 18 | tr -dc 'a-zA-Z0-9' | head -c13)
echo "Password: $ADMIN_PASS" echo "Password: $ADMIN_PASS"
} >> ~/splunk.creds } >> ~/splunk.creds
cat > "/opt/splunk/etc/system/local/user-seed.conf" << EOF cat << EOF > "/opt/splunk/etc/system/local/user-seed.conf"
[user_info] [user_info]
USERNAME = $ADMIN_USER USERNAME = $ADMIN_USER
PASSWORD = $ADMIN_PASS PASSWORD = $ADMIN_PASS
@@ -70,8 +73,8 @@ EOF
msg_ok "Created Splunk admin user" msg_ok "Created Splunk admin user"
msg_info "Starting Service" msg_info "Starting Service"
$STD /opt/splunk/bin/splunk start --accept-license --answer-yes --no-prompt $STD sudo -u splunk /opt/splunk/bin/splunk start --accept-license --answer-yes --no-prompt
$STD /opt/splunk/bin/splunk enable boot-start $STD /opt/splunk/bin/splunk enable boot-start -user splunk
msg_ok "Started Service" msg_ok "Started Service"
motd_ssh motd_ssh