93 lines
3.2 KiB
Bash
93 lines
3.2 KiB
Bash
#!/usr/bin/env bash
|
|
|
|
# Copyright (c) 2021-2025 tteck
|
|
# Author: rcastley
|
|
# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
|
|
# Source: https://www.splunk.com/en_us/download.html
|
|
|
|
source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
|
|
color
|
|
verb_ip6
|
|
catch_errors
|
|
setting_up_container
|
|
network_check
|
|
update_os
|
|
|
|
echo -e "${TAB3}┌─────────────────────────────────────────────────────────────────────────┐"
|
|
echo -e "${TAB3}│ SPLUNK GENERAL TERMS │"
|
|
echo -e "${TAB3}└─────────────────────────────────────────────────────────────────────────┘"
|
|
echo ""
|
|
echo -e "${TAB3}Before proceeding with the Splunk Enterprise installation, you must"
|
|
echo -e "${TAB3}review and accept the Splunk General Terms."
|
|
echo ""
|
|
echo -e "${TAB3}Please review the terms at:"
|
|
echo -e "${TAB3}${GATEWAY}${BGN}https://www.splunk.com/en_us/legal/splunk-general-terms.html${CL}"
|
|
echo ""
|
|
|
|
while true; do
|
|
echo -e "${TAB3}Do you accept the Splunk General Terms? (y/N): \c"
|
|
read -r response
|
|
case $response in
|
|
[Yy]|[Yy][Ee][Ss])
|
|
msg_ok "Terms accepted. Proceeding with installation..."
|
|
break
|
|
;;
|
|
[Nn]|[Nn][Oo]|"")
|
|
msg_error "Terms not accepted. Installation cannot proceed."
|
|
msg_error "Please review the terms and run the script again if you wish to proceed."
|
|
exit 1
|
|
;;
|
|
*)
|
|
msg_error "Invalid response. Please enter 'y' for yes or 'n' for no."
|
|
;;
|
|
esac
|
|
done
|
|
|
|
URL="https://www.splunk.com/en_us/download/splunk-enterprise.html"
|
|
DEB_URL=$(curl -s "$URL" | grep -o 'data-link="[^"]*' | sed 's/data-link="//' | grep "https.*products/splunk/releases" | grep "\.deb$")
|
|
VERSION=$(echo "$DEB_URL" | sed 's|.*/releases/\([^/]*\)/.*|\1|')
|
|
DEB_FILE="splunk-enterprise.deb"
|
|
|
|
msg_info "Downloading Splunk Enterprise"
|
|
$STD curl -fsSL -o "$DEB_FILE" "$DEB_URL" || {
|
|
msg_error "Failed to download Splunk Enterprise from the provided link."
|
|
exit 1
|
|
}
|
|
msg_ok "Downloaded Splunk Enterprise v${VERSION}"
|
|
|
|
msg_info "Installing Splunk Enterprise"
|
|
$STD dpkg -i "$DEB_FILE"
|
|
msg_ok "Installed Splunk Enterprise v${VERSION}"
|
|
|
|
msg_info "Creating Splunk admin user"
|
|
SPLUNK_HOME="/opt/splunk"
|
|
ADMIN_USER="admin"
|
|
ADMIN_PASS=$(openssl rand -base64 18 | tr -dc 'a-zA-Z0-9' | head -c13)
|
|
{
|
|
echo "Splunk-Credentials"
|
|
echo "Username: $ADMIN_USER"
|
|
echo "Password: $ADMIN_PASS"
|
|
} >> ~/splunk.creds
|
|
|
|
cat > "${SPLUNK_HOME}/etc/system/local/user-seed.conf" << EOF
|
|
[user_info]
|
|
USERNAME = $ADMIN_USER
|
|
PASSWORD = $ADMIN_PASS
|
|
EOF
|
|
msg_ok "Created Splunk admin user"
|
|
|
|
msg_info "Starting Splunk Enterprise"
|
|
$STD ${SPLUNK_HOME}/bin/splunk start --accept-license --answer-yes --no-prompt
|
|
$STD ${SPLUNK_HOME}/bin/splunk enable boot-start
|
|
msg_ok "Splunk Enterprise started"
|
|
|
|
motd_ssh
|
|
customize
|
|
|
|
msg_info "Cleaning up"
|
|
$STD rm -f "$DEB_FILE"
|
|
$STD apt-get -y autoremove
|
|
$STD apt-get -y autoclean
|
|
msg_ok "Cleaned"
|
|
cleanup_lxc
|