/splunk-db

Primary LanguagePython

Installation steps

  1. Create .env file containing credentials from template
  2. Generate all .csv files containing simulated data
  3. Generate initialization create-db.sql file that contains
    • the MYSQL splunkuser grants
    • tables schemas based on the corresponding csv file structure
    • table load based on the corresponding csv file content
  4. Start the docker environment
  • Splunk + apps
  • MySQL DB server
  1. Wait for DBConnect APIs to be online
  2. Configure DBX using API calls
  • create identity
  • create DB connection to MySQL DB server
  1. Enjoy

To Do

  • Group generated content in one dir to avoid pushing to Git
  • Remove hardwired file/dirs ( like /data in Dockerfile)
  • Set timezone for both containers
  • Review DB Creation and initialization ( too complex )
  • make up fails as passwords are regenerated
  • Prepare for Splunk 9.x ( dbxquery is still flagged risky )
  • dd