xTag

Overview

Full name
docker.io/splunk/splunk
Registry
docker.io
Namespace
splunk
Repository
splunk
Cached tags
472
Last synced
07/06/2026, 05:40 AM

Introduction

Splunk Enterprise 日志分析与 SIEM 平台镜像，索引机器数据并提供搜索 Dashboard，适合安全运维与可观测性中心。

Details

splunk/splunk 运行 Splunk Enterprise 单实例，索引 syslog/metrics 并提供 SPL 搜索与告警。定位为日志分析 Web 平台，需大容量 PVC 与 SPLUNK_START_ARGS；K8s StatefulSet 或 Splunk Operator 部署。

快速启动

docker run -d --name splunk \
  -p 8000:8000 -p 8089:8089 \
  -e SPLUNK_START_ARGS=--accept-license \
  -e SPLUNK_PASSWORD=changeme \
  docker.io/splunk/splunk:latest

推荐实践

docker run -d --name splunk \
  --restart unless-stopped \
  -p 8000:8000 -p 8089:8089 \
  -v /data/splunk:/opt/splunk/var \
  -e SPLUNK_START_ARGS=--accept-license \
  -e SPLUNK_PASSWORD=changeme \
  docker.io/splunk/splunk:9.2.0

核心参数说明

  • -p 8000:8000 — Splunk Web UI 端口
  • -p 8089:8089 — Splunkd 管理 API
  • -e SPLUNK_PASSWORD — admin 密码（高敏）
  • -v .../splunk:... — 索引数据持久化

Kubernetes

apiVersion: apps/v1
kind: StatefulSet
metadata:
  name: splunk
spec:
  serviceName: splunk
  replicas: 1
  selector:
    matchLabels:
      app: splunk
  template:
    metadata:
      labels:
        app: splunk
    spec:
      containers:
        - name: splunk
          image: docker.io/splunk/splunk:9.2.0
          ports:
            - containerPort: 8000
            - containerPort: 8089
          envFrom:
            - secretRef:
                name: splunk-secret
          volumeMounts:
            - name: data
              mountPath: /opt/splunk/var
  volumeClaimTemplates:
    - metadata:
        name: data
      spec:
        accessModes: [ReadWriteOnce]
        resources:
          requests:
            storage: 200Gi
---
apiVersion: v1
kind: Service
metadata:
  name: splunk
spec:
  selector:
    app: splunk
  ports:
    - name: web
      port: 8000
    - name: mgmt
      port: 8089

Splunk Operator 推荐集群模式；Ingress TLS 访问 Web。

Latest tags (20)

View all 472 tags →
TagArchPushed AtSizeDigestSyncWishAction
docker.io/splunk/splunk
:10.2-rhel9
linux/amd64
2026/06/03 09:061.8 GBsha256:7c57301d0124…
docker.io/splunk/splunk
:10.0-rhel9
linux/amd64
2026/06/03 09:051.7 GBsha256:a152cbf4471a…
docker.io/splunk/splunk
:10.2.4-rhel9
linux/amd64
2026/06/03 07:571.8 GBsha256:7c57301d0124…
docker.io/splunk/splunk
:1526e5e5df42-rhel9
linux/amd64
2026/06/03 07:561.8 GBsha256:7c57301d0124…
docker.io/splunk/splunk
:10.0.7-rhel9
linux/amd64
2026/06/03 07:561.7 GBsha256:a152cbf4471a…
docker.io/splunk/splunk
:d24b16fd5f20-rhel9
linux/amd64
2026/06/03 07:561.7 GBsha256:a152cbf4471a…
docker.io/splunk/splunk
:10.0
linux/amd64
2026/05/30 03:531.7 GBsha256:0dee86c21432…
docker.io/splunk/splunk
:10.2
linux/amd64
2026/05/30 03:421.7 GBsha256:965a4f3cdb2e…
docker.io/splunk/splunk
:9.3
linux/amd64
2026/05/30 03:401.1 GBsha256:8736670d0ca6…
docker.io/splunk/splunk
:9.4
linux/amd64
2026/05/30 03:371.3 GBsha256:d2098761fc08…
docker.io/splunk/splunk
:10.2.4
linux/amd64
2026/05/30 03:251.7 GBsha256:965a4f3cdb2e…
docker.io/splunk/splunk
:1526e5e5df42
linux/amd64
2026/05/30 03:241.7 GBsha256:965a4f3cdb2e…
docker.io/splunk/splunk
:10.0.7
linux/amd64
2026/05/30 03:241.7 GBsha256:0dee86c21432…
docker.io/splunk/splunk
:d24b16fd5f20
linux/amd64
2026/05/30 03:241.7 GBsha256:0dee86c21432…
docker.io/splunk/splunk
:9.4.12
linux/amd64
2026/05/30 03:231.3 GBsha256:d2098761fc08…
docker.io/splunk/splunk
:9dfc486f3d48
linux/amd64
2026/05/30 03:231.3 GBsha256:d2098761fc08…
docker.io/splunk/splunk
:9.3.13
linux/amd64
2026/05/30 03:221.1 GBsha256:8736670d0ca6…
docker.io/splunk/splunk
:688758e24bbe
linux/amd64
2026/05/30 03:221.1 GBsha256:8736670d0ca6…
docker.io/splunk/splunk
:10.4-rhel9
linux/amd64
2026/05/20 05:511.7 GBsha256:bb3bbff8f6fe…
docker.io/splunk/splunk
:10.4.0-rhel9
linux/amd64
2026/05/20 04:591.7 GBsha256:bb3bbff8f6fe…