From 92d2098d30c253a5c2047811e5c138d899efff19 Mon Sep 17 00:00:00 2001 From: JocelynPa Date: Mon, 20 Mar 2023 17:07:20 +0100 Subject: [PATCH] add_conf_for_cluster_forwarder --- .../local/app.conf | 9 +++++++++ .../local/outputs.conf | 12 ++++++++++++ .../local/server.conf | 2 ++ 3 files changed, 23 insertions(+) create mode 100644 Apps_for_DS/02-M-TIC_cluster_forwarder_outputs/local/app.conf create mode 100644 Apps_for_DS/02-M-TIC_cluster_forwarder_outputs/local/outputs.conf create mode 100644 Apps_for_DS/02-M-TIC_cluster_forwarder_outputs/local/server.conf diff --git a/Apps_for_DS/02-M-TIC_cluster_forwarder_outputs/local/app.conf b/Apps_for_DS/02-M-TIC_cluster_forwarder_outputs/local/app.conf new file mode 100644 index 0000000..658f61e --- /dev/null +++ b/Apps_for_DS/02-M-TIC_cluster_forwarder_outputs/local/app.conf @@ -0,0 +1,9 @@ +[install] +state = enabled + +[package] +check_for_update = false + +[ui] +is_visible = false +is_manageable = false \ No newline at end of file diff --git a/Apps_for_DS/02-M-TIC_cluster_forwarder_outputs/local/outputs.conf b/Apps_for_DS/02-M-TIC_cluster_forwarder_outputs/local/outputs.conf new file mode 100644 index 0000000..bba60aa --- /dev/null +++ b/Apps_for_DS/02-M-TIC_cluster_forwarder_outputs/local/outputs.conf @@ -0,0 +1,12 @@ +[tcpout] +defautlGroup = primary_indexers +maxQueuSize = 100MB +useACK = true +forceTimebaseAutoLB = true +forwardedindex.2.whitelist = (_audit|_introspection|_internal) + +[tcpout:primary_indexers] +server = SVLCTPLOGIDX01.mom.fr:9997, SVLCTPLOGIDX02.mom.fr:9997 + +#clientCert = $SPLUNK_HOME/etc/auth/server.pem +#sslPassword = diff --git a/Apps_for_DS/02-M-TIC_cluster_forwarder_outputs/local/server.conf b/Apps_for_DS/02-M-TIC_cluster_forwarder_outputs/local/server.conf new file mode 100644 index 0000000..e05e21c --- /dev/null +++ b/Apps_for_DS/02-M-TIC_cluster_forwarder_outputs/local/server.conf @@ -0,0 +1,2 @@ +[sslConfig] +sslRootCAPath = $SPLUNK_HOME/etc/auth/ca.pem \ No newline at end of file