docker-compose.yml

services:
  soar:
    image: soar:6.3.1
    container_name: soar
    privileged: true
    depends_on:
      - splunk
    networks:
      soar-network:
        ipv4_address: 172.42.0.2
    volumes:
      - /sys/fs/cgroup:/sys/fs/cgroup
    ports:
      - "31415:31415"
      - "5432:5432"
      - "6432:6432"

  splunk:
    image: splunk/splunk:9.3
    container_name: splunk
    networks:
      soar-network:
        ipv4_address: 172.42.0.3
    volumes:
      - ./splunk/splunk_add_on_for_unix_and_linux.tgz:/tmp/splunk_add_on_for_unix_and_linux.tgz
      - ./splunk/splunk_app_for_soar.tgz:/tmp/splunk_app_for_soar.tgz
    ports:
      - "8000:8000"
      - "8088:8088"
      - "9997:9997"
    environment:
      - SPLUNK_START_ARGS=--accept-license
      - SPLUNK_PASSWORD=password
      - SPLUNK_APPS_URL=/tmp/splunk_app_for_soar.tgz,/tmp/splunk_add_on_for_unix_and_linux.tgz

networks:
  soar-network:
    driver: bridge
    ipam:
      config:
        - subnet: 172.42.0.0/24