splunk单节点容器部署

docker pull splunk/splunk:latest
docker pull splunk/universalforwarder:latest
docker run --name so1 --hostname so1 -p 8000:8000 
              -e "SPLUNK_PASSWORD=<password>" 
              -e "SPLUNK_START_ARGS=--accept-license" 
              -e "SPLUNK_LICENSE_URI=Free" 
              -it splunk/splunk:latest

数据路径
/opt/splunk/var/lib/splunk