Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add Splunk documentation #386

Merged
merged 11 commits into from
Aug 12, 2024
Merged

Add Splunk documentation #386

merged 11 commits into from
Aug 12, 2024

Conversation

eliykat
Copy link
Member

@eliykat eliykat commented Jul 17, 2024

🎟️ Tracking

N/A

📔 Objective

Continue my PR from here: bitwarden/splunk#54 while moving it to this repository so it can live with the rest of our documentation.

I have:

  • copied across the existing README
  • applied my initial set of changes from Improve readme splunk#54
  • actioned PR feedback
  • otherwise updated the layout and style to match our contributing docs

⏰ Reminders before review

  • Contributor guidelines followed
  • All formatters and local linters executed and passed
  • Written new unit and / or integration tests where applicable
  • Protected functional changes with optionality (feature flags)
  • Used internationalization (i18n) for all UI strings
  • CI builds passed
  • Communicated to DevOps any deployment requirements
  • Updated any necessary documentation (Confluence, contributing docs) or informed the documentation
    team

🦮 Reviewer guidelines

  • 👍 (:+1:) or similar for great changes
  • 📝 (:memo:) or ℹ️ (:information_source:) for notes or general info
  • ❓ (:question:) for questions
  • 🤔 (:thinking:) or 💭 (:thought_balloon:) for more open inquiry that's not quite a confirmed
    issue and could potentially benefit from discussion
  • 🎨 (:art:) for suggestions / improvements
  • ❌ (:x:) or ⚠️ (:warning:) for more significant problems or concerns needing attention
  • 🌱 (:seedling:) or ♻️ (:recycle:) for future improvements or indications of technical debt
  • ⛏ (:pick:) for minor or nitpick changes

@eliykat eliykat requested a review from mzieniukbw July 17, 2024 23:40
@eliykat eliykat requested a review from a team as a code owner July 17, 2024 23:40
Copy link

cloudflare-workers-and-pages bot commented Jul 17, 2024

Deploying contributing-docs with  Cloudflare Pages  Cloudflare Pages

Latest commit: e18109e
Status: ✅  Deploy successful!
Preview URL: https://f19dbaf6.contributing-docs.pages.dev
Branch Preview URL: https://splunk.contributing-docs.pages.dev

View logs

Copy link

github-actions bot commented Jul 17, 2024

Logo
Checkmarx One – Scan Summary & Details4de430d1-fc2e-4bb2-969a-e2bc300bbf6d

No New Or Fixed Issues Found

@withinfocus
Copy link
Contributor

This would be a new direction for us, to keep these sorts of documents here vs. in the repo READMEs. I think I like that and it becomes a centralization point, plus keeps our repos light in that content so we can better manage it with best practices here. There are quite a few integration-style repos out there though, especially for Secrets Manager, that could use this treatment.

Copy link
Contributor

@mzieniukbw mzieniukbw left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks great! I have a comment about the bitwarden server setup and plan, please have a look.

- Python 3.8 or 3.9
- [Poetry][poetry]
- libmagic (macOS only), available via homebrew: `brew install libmagic`
- A Bitwarden server with event logging configured and an enterprise organization. To set this up
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

  • Event logging works out of the box, there is nothing to configure - unless it's some custom self-hosted setup, which does not have event logging enabled.
  • Event logging works on any business plan, including Teams - makes me wonder if this does belongs to the "Enterprise" section 🤔

Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

  • event logging - that's true, I've amended this to be more specific. Many devs, myself included, just run the minimum api & identity projects when developing day-to-day, so I want to highlight the additional requirements here
  • plan requirements - also true! I've fixed this. The "Enterprise" category is meant to describe enterprise use (business use), not the enterprise plan specifically, maybe it could be better named. Directory Connector is under this category and that is also compatible with Teams plans.

Comment on lines 32 to 46
3. Activate the poetry shell:

```
poetry shell
```

4. Tell poetry to use the required Python version:

```
poetry env use <executable>
```

Where `<executable>` is the executable for Python 3.8 or 3.9. If this is in your PATH variable
then you do not need to specify the full path. e.g. `poetry env use python3.8`

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

i just did a fresh test and i think this should be the other way around.
We firstly tell poetry to create the virtual environment for the python version we want to use.
And then we activate it with poetry shell


- Docker. If you're using an Apple Silicon Mac, enable _Docker Desktop_ -> _Settings_ -> _General_
-> _Use Rosetta for x86_64/amd64 emulation on Apple Silicon_
- Python 3.8 or 3.9
Copy link
Contributor

@mzieniukbw mzieniukbw Jul 19, 2024

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I have just tested other python versions and it works fine with 3.7-3.10
In 3.11 and 3.12 the ./package.sh step produces an error during splunk-appinspect package validation - looks like the splunk tooling is not compatible with never versions of python.
Also let's add 3.7, even though it's EOL, since it's it is still supported by Splunk.

Suggested change
- Python 3.8 or 3.9
- Python 3.7-3.10

@eliykat eliykat requested a review from mzieniukbw July 21, 2024 23:52
mzieniukbw
mzieniukbw previously approved these changes Jul 22, 2024
Copy link
Contributor

@mzieniukbw mzieniukbw left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM.
One note, i find the "Enterprise" section without any explanation on where it applies a bit confusing, since SIEM works for Team plan too, so it should be overall labeled as "Business". Maybe it's about time to rename it or add a dedicated page that explains in one word to which this applies to ?

@eliykat
Copy link
Member Author

eliykat commented Aug 12, 2024

I've renamed the section to "Business", I agree that's clearer and matches the Personal/Business distinction on our plans page, for example.

Copy link
Contributor

@djsmith85 djsmith85 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Can't say anything about the setup process of the splunk integration as I haven't worked with it, yet. Changes are looking good though and can be refined in the future in case @mzieniukbw has any comments.

@eliykat eliykat merged commit 396ac63 into main Aug 12, 2024
7 checks passed
@eliykat eliykat deleted the splunk branch August 12, 2024 20:09
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants