Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
4 changes: 2 additions & 2 deletions docs/PremiumApps.md
Original file line number Diff line number Diff line change
Expand Up @@ -8,7 +8,7 @@ The Splunk Operator automates the installation of Enterprise Security (ES) with

* You need the ability to utilize the Splunk Operator [app framework](https://splunk.github.io/splunk-operator/AppFramework.html) method of installation.
* You need the access to the [Splunk ES](https://splunkbase.splunk.com/app/263/) app package.
* ES support in Splunk Operator is starting from Splunk Operator Release `2.2.0` which requires Splunk Enterprise `9.0.3-a2` or later. Per the [Splunk Enterprise and Enterprise Security version compatibility matrix](https://docs.splunk.com/Documentation/VersionCompatibility/current/Matrix/CompatMatrix), Splunk ES versions `7.1.0, 7.0.2, 7.0.1, 7.0.0 or 6.6.2` are supported currently.
* ES support in Splunk Operator is starting from Splunk Operator Release `2.2.0` which requires Splunk Enterprise `9.0.3-a2` or later. Per the [Splunk Enterprise and Enterprise Security version compatibility matrix](https://docs.splunk.com/Documentation/VersionCompatibility/current/Matrix/CompatMatrix), Splunk ES versions `8.0.2. 7.3.2, 7.1.0, 7.0.2, 7.0.1, 7.0.0 or 6.6.2` are supported currently.
* You need to make sure pod resource specs meet the [ES hardware requirements](https://docs.splunk.com/Documentation/ES/latest/Install/DeploymentPlanning#Hardware_requirements).
* In the following sections, AWS S3 remote bucket is used for placing the splunk apps, but as given in the [app framework doc](https://splunk.github.io/splunk-operator/AppFramework.html), you can use Azure Blob remote buckets also.
* You need to deploy add-ons to forwarders manually (or through your own methods).
Expand Down Expand Up @@ -164,7 +164,7 @@ Use the following steps to install ES on a Splunk deployment with an SHC integra
2. Use kubectl to apply the following YAML file
2. Wait for the SHC, CM, and Indexers pods are in ready state.
3. Login to an SH and verify that ES App is installed.
3. Extract the Splunk_TA_ForIndexers using the steps given here: [https://docs.splunk.com/Documentation/ES/7.0.2/Install/InstallTechnologyAdd-ons]
3. Extract the Splunk_TA_ForIndexers using the steps given here: [https://docs.splunk.com/Documentation/ES/8.0.2/Install/InstallTechAdd-ons]
4. Upload the extracted Splunk_TA_ForIndexers package to the S3 bucket folder named "es_app_indexer_ta"

The operator will poll this bucket after configured appsRepoPollIntervalSeconds and install the Splunk_TA_ForIndexers.
Expand Down
2 changes: 1 addition & 1 deletion test/testenv/appframework_utils.go
Original file line number Diff line number Diff line change
Expand Up @@ -34,7 +34,7 @@ var AppInfo = map[string]map[string]string{
"Splunk_TA_stream": {"V1": "7.3.0", "V2": "7.4.0", "filename": "splunk-add-on-for-stream-forwarders.tgz"},
"splunk_app_db_connect": {"V1": "3.5.0", "V2": "3.5.1", "filename": "splunk-db-connect.tgz"},
"Splunk_Security_Essentials": {"V1": "3.3.2", "V2": "3.3.3", "filename": "splunk-security-essentials.tgz"},
"SplunkEnterpriseSecuritySuite": {"V1": "6.4.0", "V2": "6.4.1", "filename": "splunk-enterprise-security.spl"},
"SplunkEnterpriseSecuritySuite": {"V1": "7.3.2", "V2": "8.0.2", "filename": "splunk-enterprise-security-8.spl"},
"Splunk_TA_ForIndexers": {"V1": "1.0.0", "V2": "1.0.0", "filename": "TA_ForIndexers.spl"},
"test_app": {"V1": "1.0.0", "V2": "1.0.0", "filename": "test_app.tgz"},
"test_app2": {"V1": "1.0.0", "V2": "1.0.0", "filename": "test_app2.tgz"},
Expand Down
Loading