--- # user used by ansible on client ansible_user: admin # number of retry for a command retry_num: 3 # delay in sec between 2 retry delay_num: 3 # password visible in std_out hide_password: false # version use for all the auto_generated_apps ansible_script_version: 1.0 # author displayed in all the auto_generated_apps author: Louis-Marie NOGUES # prefix set in the name of all the auto generated apps splunk_app_prefix: ansbl create_base_apps: true ### SPLUNK BASIC INSTALL ### # apply the chwon splunk_home_ownership_enforcement: true # cli user for splunk splunk_user: splunk splunk_group: splunk # path to the package on ansible host splunk_build_location: /mnt/e/prj/splunk/splunk-7.3.2-c60db69f8e32-Linux-x86_64.tgz # /mnt/e/prj/splunk/splunk-8.0.0-1357bef0a7f6-Linux-x86_64.tgz # path is a http link splunk_build_remote_src: false # splunk path splunk_opt: /opt splunk_home: /opt/splunk splunk_exec: /opt/splunk/bin/splunk ### SPLUNK BASIC CONFIG ### # start splunk as a service splunk_enable_service: true # splunk admin info splunk_password: splunk_admin_user: admin # splunk default configuration splunk_general_pass4SymmKey: splunk_secret: splunk_svc_port: 8089 splunk_http_port: 8000 splunk_s2s_port: 9997 splunk_disable_kvstore_on_idx: false splunk_disable_web_on_idx: false # default site, can be override on each host_vars splunk_license_uri: - - ### SPLUNK BASIC SSL ### splunk_enableSSL: false splunk_ssl_cert_password: password splunk_ssl_generate_cert: false splunk_ssl_generate_root_cert: false ### SPLUNK INDEX CLUSTERING ### splunk_indexer_cluster: true splunk_replication_port: 9100 splunk_site: site0 splunk_multisite: true splunk_idxc_pass4SymmKey: splunk_search_factor: splunk_replication_factor: splunk_idx_discovery_pass4SymmKey: splunk_idxcluster_label: splunk_all_sites: site1,site2 splunk_multisite_replication_factor_origin: splunk_multisite_replication_factor_total: splunk_multisite_search_factor_origin: splunk_multisite_search_factor_total: ### SPLUNK SH CLUSTERING ### splunk_search_head_cluster: true splunk_shcluster_replication_port: 9200 splunk_shcluster_mode: member splunk_shcluster_label: splunk_shcluster_pass4SymmKey: splunk_shcluster_election: false ### PREMIUM APPS ### ## ITSI ## # Flag to trigger installation of Premium Apps splunk_itsi: True # local_path for the itsi package splunk_itsi_local_path: ### JAVA ### # which version of java to be installed (oracle:8,openjdk:8,openjdk:11,openjdk:13,openjdk:9 (windows)) java_version: openjdk:11 java_update_version: 11.0.2 java_download_url: /mnt/e/prj/splunk/tools/openjdk-11.0.2_linux-x64_bin.tar.gz java_download_url_remote: false # add optimitstic_about_file_locking flag in the splunk splunk-launch.conf # usefull for docker + Windows splunk_optimistic_about_file_locking: false