From d448f6ec78182045a155c274d8b1570d487284aa Mon Sep 17 00:00:00 2001
From: JocelynPa <pamphile.jocelyn@orange.fr>
Date: Fri, 10 Mar 2023 15:11:09 +0100
Subject: [PATCH] UpdateV3

---
 Deleted_Splunk.yml          | 14 --------------
 Deleted_SplunkForwarder.yml | 33 +++++++++++++++++++++++++++++++++
 2 files changed, 33 insertions(+), 14 deletions(-)
 create mode 100644 Deleted_SplunkForwarder.yml

diff --git a/Deleted_Splunk.yml b/Deleted_Splunk.yml
index db78f3a..61476f5 100644
--- a/Deleted_Splunk.yml
+++ b/Deleted_Splunk.yml
@@ -5,33 +5,19 @@
   become_user: root
   vars:
     splunk_dir: "/opt/splunk"
-    splunkforwarder_dir: "/opt/splunkforwarder"
   tasks:
     - name: Arrêter tous les processus Splunk en cours d'exécution
       shell: "{{ splunk_dir }}/bin/splunk stop"
       ignore_errors: true
 
-    - name: Arrêter tous les processus Splunkforwarder en cours d'exécution
-      shell: "{{ splunkforwarder_dir }}/bin/splunk stop"
-      ignore_errors: true
-
     - name: Désinstaller le service Splunk
       shell: "{{ splunk_dir }}/bin/splunk disable boot-start"
 
-    - name: Désinstaller le service Splunk
-      shell: "{{ splunkforwarder_dir }}/bin/splunk disable boot-start"
-
-
     - name: Supprimer le répertoire d'installation de Splunk
       file:
         path: "{{ splunk_dir }}"
         state: absent
 
-    - name: Supprimer le répertoire d'installation de Splunk
-      file:
-        path: "{{ splunkforwarder_dir }}"
-        state: absent
-
     - name: Supprimer l'utilisateur Splunk et son groupe
       user:
         name: splunk
diff --git a/Deleted_SplunkForwarder.yml b/Deleted_SplunkForwarder.yml
new file mode 100644
index 0000000..5063df8
--- /dev/null
+++ b/Deleted_SplunkForwarder.yml
@@ -0,0 +1,33 @@
+---
+- name: Supprimer Splunk de Linux
+  hosts: all
+  become: true
+  become_user: root
+  vars:
+    splunkforwarder_dir: "/opt/splunkforwarder"
+  tasks:
+    - name: Arrêter tous les processus Splunkforwarder en cours d'exécution
+      shell: "{{ splunkforwarder_dir }}/bin/splunk stop"
+      ignore_errors: true
+
+    - name: Désinstaller le service Splunk
+      shell: "{{ splunkforwarder_dir }}/bin/splunk disable boot-start"
+
+    - name: Supprimer le répertoire d'installation de Splunk
+      file:
+        path: "{{ splunkforwarder_dir }}"
+        state: absent
+
+    - name: Supprimer l'utilisateur Splunk et son groupe
+      user:
+        name: splunk
+        state: absent
+      ignore_errors: true
+
+    - name: Supprimer les entrées de démarrage automatique de Splunk
+      file:
+        path: "{{ item }}"
+        state: absent
+      with_items:
+        - /etc/init.d/splunk
+        - /etc/systemd/system/splunk.service