Using Eventgen in Splunk Lab

What Is Eventgen?

Image for post
Image for post
Because a Docker container is quicker than spinning up a VM.

Why Use Eventgen?

How Eventgen Is Used in Splunk Lab

How To Spin Up Splunk Lab with Eventgen?

SPLUNK_EVENTGEN=1 bash <(curl -Ls https://bit.ly/splunklab)
Image for post
Image for post
ASCII Art. Just like logging into your favorite BBS.
Image for post
Image for post
“Now with CIM Compliance!”
Image for post
Image for post
Still a better love story than Twilight.

How To Configure Eventgen?

docker run -d -p 8000:8000 \
-v $(pwd)/splunk-lab-app:/opt/splunk/etc/apps/splunk-lab \
-e SPLUNK_PASSWORD=password1 \
-e SPLUNK_EVENTGEN=1 \
--name splunk-lab \
dmuth1/splunk-lab
docker exec -it splunk-lab bash

Credits

Written by

Engineer. Staff at Anthrocon, Anthro New England, Midwest FurFest, Furry Migration, Eurofurence. AWS, Splunk, Docker, DMARC, White Mage, he/him

Get the Medium app

A button that says 'Download on the App Store', and if clicked it will lead you to the iOS App store
A button that says 'Get it on, Google Play', and if clicked it will lead you to the Google Play store