Splunk-Enterprise splunk/splunk:latest https://hub.docker.com/r/splunk/splunk bridge bash false https://github.com/hoody424/unraid-templates/issues https://www.splunk.com/en_us/products/splunk-enterprise.html https://github.com/hoody424/unraid-templates/blob/main/splunk-enterprise/README.md Splunk Enterprise from the official splunk/splunk image, as a single standalone instance: search, dashboards and alerts over logs and machine data. Receives data from Splunk Universal Forwarders (port 9997), over the HTTP Event Collector (port 8088) or from files you add in the web UI (port 8000). You must accept the Splunk General Terms and the license (two variables below) and set an admin password of at least 8 characters before the first start. Without a license file Splunk runs as a 60-day trial and then as Splunk Free (500 MB of data per day). To install a specific version, replace "latest" in the repository with a tag such as splunk/splunk:10.2.6. The first start takes a few minutes. Tools: Productivity: Status:Stable http://[IP]:[PORT:8000]/ https://raw.githubusercontent.com/hoody424/unraid-templates/main/splunk-enterprise/splunk-enterprise.xml https://cdn.jsdelivr.net/gh/selfhst/icons/png/splunk.png splunk siem log logs logging search analytics hec universal forwarder syslog Accept the Splunk General Terms and license (variables below) and set an admin password. About 4 GB of RAM and fast storage for the index. Splunk General Terms (Splunk Enterprise, proprietary); MIT (template) ### 2026-11-14 - Initial release (official splunk/splunk image) 2026-11-14 --ulimit nofile=65536:65536 --stop-timeout 120 8000 8089 9997 8088 /mnt/user/appdata/splunk-enterprise/etc /mnt/user/appdata/splunk-enterprise/var Etc/UTC