Skip to content

Instantly share code, notes, and snippets.

View automine's full-sized avatar

David Shpritz automine

48 followers · 5 following
View GitHub Profile
@automine
automine / docker-compose.yml
Last active July 3, 2022 00:30
Splunk DS+MN, SH, 2xIDX, UF
version: '3'
services:
splunksh:
hostname: splunksh
image: splunk/splunk:6.6.3
environment:
SPLUNK_START_ARGS: --accept-license --answer-yes --no-prompt
OPTIMISTIC_ABOUT_FILE_LOCKING: '1'
ports:
@automine
automine / docker-compose.yml
Created October 16, 2017 13:59
Splunk DS, SH, IDX, UF
version: '3'
services:
splunksh:
hostname: splunksh
image: splunk/splunk:6.6.3
environment:
SPLUNK_START_ARGS: --accept-license --answer-yes --no-prompt
OPTIMISTIC_ABOUT_FILE_LOCKING: '1'
ports:
@automine
automine / keybase.md
Created October 18, 2017 18:54

Keybase proof

I hereby claim:

  • I am automine on github.
  • I am automine (https://keybase.io/automine) on keybase.
  • I have a public key ASBsDDTfSgZw2aFLr6eiXjejbCE7rpGcUFJC1SjCYl240Qo

To claim this, I am signing this object:

@automine
automine / gist:7dd261b80d7c7dc9ae2b311a31a8a363
Created April 9, 2018 13:44
keybase (again)
### Keybase proof
I hereby claim:
* I am automine on github.
* I am automine (https://keybase.io/automine) on keybase.
* I have a public key ASAmDeG-PDoFrJlOu7uUikMRDlxvi6D4m6k0y-xTxe0R3Qo
To claim this, I am signing this object:
@automine
automine / docker-compose.yml
Created September 24, 2018 14:56
Single Splunk instance, 7.0.3
version: '3'
services:
splunksh:
hostname: splunksh
image: splunk/splunk:7.0.3
environment:
SPLUNK_START_ARGS: --accept-license --answer-yes --no-prompt
OPTIMISTIC_ABOUT_FILE_LOCKING: '1'
ports:
@automine
automine / docker-compose.yml
Created September 24, 2018 15:00
Splunk 7.1 docker-compose, single instance
version: '3'
services:
splunksh:
hostname: splunksh
image: splunk/splunk:7.1.2
environment:
SPLUNK_START_ARGS: --accept-license --answer-yes --no-prompt --seed-passwd changed123
SPLUNK_USER: root
OPTIMISTIC_ABOUT_FILE_LOCKING: '1'
@automine
automine / remove_local.bat
Created October 16, 2018 19:06
Remove Splunk /etc/system/local configs - Windows
@echo off
del /f /q "%SPLUNK_HOME%\etc\system\local\inputs.conf"
del /f /q "%SPLUNK_HOME%\etc\system\local\outputs.conf"
del /f /q "%SPLUNK_HOME%\etc\system\local\deploymentclient.conf"
@automine
automine / remove_local.sh
Last active October 18, 2018 16:17
Remove Splunk /etc/system/local configs - Linux
#!/bin/sh
[ -d "/opt/splunk" ] && SPLUNKPATH="/opt/splunk"
[ -d "/opt/splunkforwarder" ] && SPLUNKPATH="/opt/splunkforwarder"
[ -f "$SPLUNKPATH/etc/system/local/inputs.conf" ] && rm -f $SPLUNKPATH/etc/system/local/inputs.conf
[ -f "$SPLUNKPATH/etc/system/local/outputs.conf" ] && rm -f $SPLUNKPATH/etc/system/local/outputs.conf
[ -f "$SPLUNKPATH/etc/system/local/deploymentclient.conf" ] && rm -f $SPLUNKPATH/etc/system/local/deploymentclient.conf
@automine
automine / Master and Indexer distsearch.conf
Last active December 15, 2023 18:46
Recommended tunings for SHC
[replicationSettings]
sendRcvTimeout = 120
@automine
automine / extended_search_reporting.xml
Last active September 11, 2020 13:32
Extended Search Reporting, v1.4 thanks to cerby on the Splunk Community Slack ([email protected])!
You should use this: https://github.com/dpaper-splunk/public/blob/master/dashboards/extended_search_reporting.xml