splunk::forwarder supported operating systems on almalinux-8-x86_64 with $boot_start = true (defaults) with $facts[service_provider] == init and $splunk::params::version >= 7.2.2 is expected to contain Class[splunk::forwarder::service::nix] Failure/Error: it { is_expected.to contain_class('splunk::forwarder::service::nix') } expected that the catalogue would contain Class[splunk::forwarder::service::nix]

splunk::forwarder supported operating systems on almalinux-8-x86_64 with $boot_start = true (defaults) with $facts[service_provider] == init and $splunk::params::version >= 7.2.2 is expected to contain Exec[stop_splunkforwarder] with command => "/opt/splunkforwarder/bin/splunk stop" Failure/Error: it { is_expected.to contain_exec('stop_splunkforwarder').with(command: '/opt/splunkforwarder/bin/splunk stop') } expected that the catalogue would contain Exec[stop_splunkforwarder]

splunk::forwarder supported operating systems on almalinux-8-x86_64 with $boot_start = true (defaults) with $facts[service_provider] == init and $splunk::params::version >= 7.2.2 is expected to contain Exec[enable_splunkforwarder] with command => "/opt/splunkforwarder/bin/splunk enable boot-start -user root --accept-license --answer-yes --no-prompt" Failure/Error: it { is_expected.to contain_exec('enable_splunkforwarder').with(command: '/opt/splunkforwarder/bin/splunk enable boot-start -user root --accept-license --answer-yes --no-prompt') } expected that the catalogue would contain Exec[enable_splunkforwarder]

splunk::forwarder supported operating systems on almalinux-8-x86_64 with $boot_start = true (defaults) with $facts[service_provider] == init and $splunk::params::version < 7.2.2 is expected to contain Class[splunk::forwarder::service::nix] Failure/Error: it { is_expected.to contain_class('splunk::forwarder::service::nix') } expected that the catalogue would contain Class[splunk::forwarder::service::nix]

splunk::forwarder supported operating systems on almalinux-8-x86_64 with $boot_start = true (defaults) with $facts[service_provider] == init and $splunk::params::version < 7.2.2 is expected to contain Exec[stop_splunkforwarder] with command => "/opt/splunkforwarder/bin/splunk stop" Failure/Error: it { is_expected.to contain_exec('stop_splunkforwarder').with(command: '/opt/splunkforwarder/bin/splunk stop') } expected that the catalogue would contain Exec[stop_splunkforwarder]

splunk::forwarder supported operating systems on almalinux-8-x86_64 with $boot_start = true (defaults) with $facts[service_provider] == init and $splunk::params::version < 7.2.2 is expected to contain Exec[enable_splunkforwarder] with command => "/opt/splunkforwarder/bin/splunk enable boot-start -user root --accept-license --answer-yes --no-prompt" Failure/Error: it { is_expected.to contain_exec('enable_splunkforwarder').with(command: '/opt/splunkforwarder/bin/splunk enable boot-start -user root --accept-license --answer-yes --no-prompt') } expected that the catalogue would contain Exec[enable_splunkforwarder]

splunk::forwarder supported operating systems on almalinux-8-x86_64 with $boot_start = true (defaults) with $facts[service_provider] == systemd and $splunk::params::version >= 7.2.2 is expected to contain Class[splunk::forwarder::service::nix] Failure/Error: it { is_expected.to contain_class('splunk::forwarder::service::nix') } expected that the catalogue would contain Class[splunk::forwarder::service::nix]

splunk::forwarder supported operating systems on almalinux-8-x86_64 with $boot_start = true (defaults) with $facts[service_provider] == systemd and $splunk::params::version >= 7.2.2 is expected to contain Exec[stop_splunkforwarder] with command => "/opt/splunkforwarder/bin/splunk stop" Failure/Error: it { is_expected.to contain_exec('stop_splunkforwarder').with(command: '/opt/splunkforwarder/bin/splunk stop') } expected that the catalogue would contain Exec[stop_splunkforwarder]

splunk::forwarder supported operating systems on almalinux-8-x86_64 with $boot_start = true (defaults) with $facts[service_provider] == systemd and $splunk::params::version >= 7.2.2 is expected to contain Exec[enable_splunkforwarder] with command => "/opt/splunkforwarder/bin/splunk enable boot-start -user root -systemd-managed 1 --accept-license --answer-yes --no-prompt" Failure/Error: it { is_expected.to contain_exec('enable_splunkforwarder').with(command: '/opt/splunkforwarder/bin/splunk enable boot-start -user root -systemd-managed 1 --accept-license --answer-yes --no-prompt') } expected that the catalogue would contain Exec[enable_splunkforwarder]

splunk::forwarder supported operating systems on almalinux-8-x86_64 with $boot_start = true (defaults) with $facts[service_provider] == systemd and $splunk::params::version >= 7.2.2 and user != root is expected to contain Exec[enable_splunkforwarder] with command => "/opt/splunkforwarder/bin/splunk enable boot-start -user splunk -systemd-managed 1 --accept-license --answer-yes --no-prompt" Failure/Error: it { is_expected.to contain_exec('enable_splunkforwarder').with(command: '/opt/splunkforwarder/bin/splunk enable boot-start -user splunk -systemd-managed 1 --accept-license --answer-yes --no-prompt') } expected that the catalogue would contain Exec[enable_splunkforwarder]

splunk::forwarder supported operating systems on almalinux-8-x86_64 with $boot_start = true (defaults) with $facts[service_provider] == init and $splunk::params::version >= 7.2.2 is expected to contain Class[splunk::forwarder::service::nix] Failure/Error: it { is_expected.to contain_class('splunk::forwarder::service::nix') } expected that the catalogue would contain Class[splunk::forwarder::service::nix]

splunk::forwarder supported operating systems on almalinux-8-x86_64 with $boot_start = true (defaults) with $facts[service_provider] == init and $splunk::params::version >= 7.2.2 is expected to contain Exec[stop_splunkforwarder] with command => "/opt/splunkforwarder/bin/splunk stop" Failure/Error: it { is_expected.to contain_exec('stop_splunkforwarder').with(command: '/opt/splunkforwarder/bin/splunk stop') } expected that the catalogue would contain Exec[stop_splunkforwarder]

splunk::forwarder supported operating systems on almalinux-8-x86_64 with $boot_start = true (defaults) with $facts[service_provider] == init and $splunk::params::version >= 7.2.2 is expected to contain Exec[enable_splunkforwarder] with command => "/opt/splunkforwarder/bin/splunk enable boot-start -user root --accept-license --answer-yes --no-prompt" Failure/Error: it { is_expected.to contain_exec('enable_splunkforwarder').with(command: '/opt/splunkforwarder/bin/splunk enable boot-start -user root --accept-license --answer-yes --no-prompt') } expected that the catalogue would contain Exec[enable_splunkforwarder]

splunk::forwarder supported operating systems on almalinux-8-x86_64 with $boot_start = true (defaults) with $facts[service_provider] == init and $splunk::params::version < 7.2.2 is expected to contain Class[splunk::forwarder::service::nix] Failure/Error: it { is_expected.to contain_class('splunk::forwarder::service::nix') } expected that the catalogue would contain Class[splunk::forwarder::service::nix]

splunk::forwarder supported operating systems on almalinux-8-x86_64 with $boot_start = true (defaults) with $facts[service_provider] == init and $splunk::params::version < 7.2.2 is expected to contain Exec[stop_splunkforwarder] with command => "/opt/splunkforwarder/bin/splunk stop" Failure/Error: it { is_expected.to contain_exec('stop_splunkforwarder').with(command: '/opt/splunkforwarder/bin/splunk stop') } expected that the catalogue would contain Exec[stop_splunkforwarder]

splunk::forwarder supported operating systems on almalinux-8-x86_64 with $boot_start = true (defaults) with $facts[service_provider] == init and $splunk::params::version < 7.2.2 is expected to contain Exec[enable_splunkforwarder] with command => "/opt/splunkforwarder/bin/splunk enable boot-start -user root --accept-license --answer-yes --no-prompt" Failure/Error: it { is_expected.to contain_exec('enable_splunkforwarder').with(command: '/opt/splunkforwarder/bin/splunk enable boot-start -user root --accept-license --answer-yes --no-prompt') } expected that the catalogue would contain Exec[enable_splunkforwarder]

splunk::forwarder supported operating systems on almalinux-8-x86_64 with $boot_start = true (defaults) with $facts[service_provider] == systemd and $splunk::params::version >= 7.2.2 is expected to contain Class[splunk::forwarder::service::nix] Failure/Error: it { is_expected.to contain_class('splunk::forwarder::service::nix') } expected that the catalogue would contain Class[splunk::forwarder::service::nix]

splunk::forwarder supported operating systems on almalinux-8-x86_64 with $boot_start = true (defaults) with $facts[service_provider] == systemd and $splunk::params::version >= 7.2.2 is expected to contain Exec[stop_splunkforwarder] with command => "/opt/splunkforwarder/bin/splunk stop" Failure/Error: it { is_expected.to contain_exec('stop_splunkforwarder').with(command: '/opt/splunkforwarder/bin/splunk stop') } expected that the catalogue would contain Exec[stop_splunkforwarder]

splunk::forwarder supported operating systems on almalinux-8-x86_64 with $boot_start = true (defaults) with $facts[service_provider] == systemd and $splunk::params::version >= 7.2.2 is expected to contain Exec[enable_splunkforwarder] with command => "/opt/splunkforwarder/bin/splunk enable boot-start -user root -systemd-managed 1 --accept-license --answer-yes --no-prompt" Failure/Error: it { is_expected.to contain_exec('enable_splunkforwarder').with(command: '/opt/splunkforwarder/bin/splunk enable boot-start -user root -systemd-managed 1 --accept-license --answer-yes --no-prompt') } expected that the catalogue would contain Exec[enable_splunkforwarder]

splunk::forwarder supported operating systems on almalinux-8-x86_64 with $boot_start = true (defaults) with $facts[service_provider] == systemd and $splunk::params::version >= 7.2.2 and user != root is expected to contain Exec[enable_splunkforwarder] with command => "/opt/splunkforwarder/bin/splunk enable boot-start -user splunk -systemd-managed 1 --accept-license --answer-yes --no-prompt" Failure/Error: it { is_expected.to contain_exec('enable_splunkforwarder').with(command: '/opt/splunkforwarder/bin/splunk enable boot-start -user splunk -systemd-managed 1 --accept-license --answer-yes --no-prompt') } expected that the catalogue would contain Exec[enable_splunkforwarder]

splunk::forwarder class Splunk forwarder version 7.2.4.2 works idempotently with no errors Failure/Error: apply_manifest(pp, catch_failures: true) Beaker::Host::CommandFailure: Host 'almalinux8-64-puppet8.example.com' exited with 6 running: puppet apply --verbose --detailed-exitcodes /tmp/apply_manifest_180336666.CHOg4Z.pp Last 10 lines of output were: Error: /Stage[main]/Splunk::Forwarder::Service/Service[SplunkForwarder]/ensure: change from 'stopped' to 'running' failed: Systemd start for SplunkForwarder failed! journalctl log for SplunkForwarder: -- Logs begin at Thu 2024-10-24 17:56:52 UTC, end at Thu 2024-10-24 18:03:40 UTC. -- -- No entries -- �[mNotice: /Stage[main]/Splunk::Forwarder::Service/Service[SplunkForwarder]: Triggered 'refresh' from 1 event Info: Class[Splunk::Forwarder::Service]: Unscheduling all events on Class[Splunk::Forwarder::Service] Info: Class[Splunk::Forwarder]: Unscheduling all events on Class[Splunk::Forwarder] Info: Stage[main]: Unscheduling all events on Stage[main] �[mNotice: Applied catalog in 1.84 seconds

splunk::forwarder class Splunk forwarder version 7.2.4.2 Service "SplunkForwarder" is expected to be enabled Failure/Error: it { is_expected.to be_enabled } expected Service "SplunkForwarder" to be enabled

splunk::forwarder class Splunk forwarder version 7.2.4.2 Service "SplunkForwarder" is expected to be running Failure/Error: it { is_expected.to be_running } expected Service "SplunkForwarder" to be running

splunk::forwarder class Splunk forwarder version 9.0.0 works idempotently with no errors Failure/Error: apply_manifest(pp, catch_failures: true) Beaker::Host::CommandFailure: Host 'almalinux8-64-puppet8.example.com' exited with 6 running: puppet apply --verbose --detailed-exitcodes /tmp/apply_manifest_180343366.j1OYx7.pp Last 10 lines of output were: Error: /Stage[main]/Splunk::Forwarder::Service/Service[SplunkForwarder]/ensure: change from 'stopped' to 'running' failed: Systemd start for SplunkForwarder failed! journalctl log for SplunkForwarder: -- Logs begin at Thu 2024-10-24 17:56:52 UTC, end at Thu 2024-10-24 18:03:47 UTC. -- -- No entries -- �[mNotice: /Stage[main]/Splunk::Forwarder::Service/Service[SplunkForwarder]: Triggered 'refresh' from 1 event Info: Class[Splunk::Forwarder::Service]: Unscheduling all events on Class[Splunk::Forwarder::Service] Info: Class[Splunk::Forwarder]: Unscheduling all events on Class[Splunk::Forwarder] Info: Stage[main]: Unscheduling all events on Stage[main] �[mNotice: Applied catalog in 2.31 seconds

splunk::forwarder class Splunk forwarder version 9.0.0 Service "SplunkForwarder" is expected to be enabled Failure/Error: it { is_expected.to be_enabled } expected Service "SplunkForwarder" to be enabled

splunk::forwarder class Splunk forwarder version 9.0.0 Service "SplunkForwarder" is expected to be running Failure/Error: it { is_expected.to be_running } expected Service "SplunkForwarder" to be running

splunk::forwarder class default parameters works idempotently with no errors Failure/Error: apply_manifest(pp, catch_failures: true) Beaker::Host::CommandFailure: Host 'almalinux8-64-puppet8.example.com' exited with 6 running: puppet apply --verbose --detailed-exitcodes /tmp/apply_manifest_180350585.IQWuKc.pp Last 10 lines of output were: Oct 24 18:03:55 almalinux8-64-puppet8.example.com splunk[9726]: Warning: Executing "chown -R splunk:splunk /opt/splunkforwarder" Oct 24 18:03:55 almalinux8-64-puppet8.example.com systemd[1]: SplunkForwarder.service: Main process exited, code=exited, status=2/INVALIDARGUMENT Oct 24 18:03:55 almalinux8-64-puppet8.example.com systemd[1]: SplunkForwarder.service: Failed with result 'exit-code'. Oct 24 18:03:55 almalinux8-64-puppet8.example.com systemd[1]: Failed to start Systemd service file for Splunk, generated by 'splunk enable boot-start'. �[mNotice: /Stage[main]/Splunk::Forwarder::Service/Service[SplunkForwarder]: Triggered 'refresh' from 1 event Info: Class[Splunk::Forwarder::Service]: Unscheduling all events on Class[Splunk::Forwarder::Service] Info: Class[Splunk::Forwarder]: Unscheduling all events on Class[Splunk::Forwarder] Info: Stage[main]: Unscheduling all events on Stage[main] �[mNotice: Applied catalog in 3.10 seconds

splunk::forwarder class default parameters File "/opt/splunkforwarder/etc/system/local/outputs.conf" content is expected to match /^sslPassword = \$7\$/ Failure/Error: its(:content) { is_expected.to match %r{^sslPassword = \$7\$} } expected "[default]\ndefaultGroup=splunk_9997\n\n[tcpout:splunk_9997]\nserver=splunk:9997\n\n[tcpout:splunkcloud]\nsslPassword=super_secure_password\n" to match /^sslPassword = \$7\$/ Diff: @@ -1,8 +1,15 @@ -/^sslPassword = \$7\$/ +[default] +defaultGroup=splunk_9997 + +[tcpout:splunk_9997] +server=splunk:9997 + +[tcpout:splunkcloud] +sslPassword=super_secure_password

splunk::forwarder class default parameters Service "SplunkForwarder" is expected to be running Failure/Error: it { is_expected.to be_running } expected Service "SplunkForwarder" to be running

splunk::forwarder class purging purge_outputs => false works idempotently with no errors Failure/Error: apply_manifest(pp, catch_changes: true) Beaker::Host::CommandFailure: Host 'almalinux8-64-puppet8.example.com' exited with 2 running: puppet apply --verbose --detailed-exitcodes /tmp/apply_manifest_180358796.GVKbFD.pp Last 10 lines of output were: Info: /Stage[main]/Splunk::Forwarder::Config/File[/opt/splunkforwarder/etc/system/local/server.conf]: Scheduling refresh of Class[Splunk::Forwarder::Service] Info: /Stage[main]/Splunk::Forwarder::Config/File[/opt/splunkforwarder/etc/system/local/server.conf]: Scheduling refresh of Class[Splunk::Forwarder::Service] Info: /Stage[main]/Splunk::Forwarder::Config/File[/opt/splunkforwarder/etc/system/local/server.conf]: Scheduling refresh of Class[Splunk::Forwarder::Service] Info: /Stage[main]/Splunk::Forwarder::Config/File[/opt/splunkforwarder/etc/system/local/server.conf]: Scheduling refresh of Class[Splunk::Forwarder::Service] Info: /Stage[main]/Splunk::Forwarder::Config/File[/opt/splunkforwarder/etc/system/local/server.conf]: Scheduling refresh of Class[Splunk::Forwarder::Service] Info: /Stage[main]/Splunk::Forwarder::Config/File[/opt/splunkforwarder/etc/system/local/server.conf]: Scheduling refresh of Class[Splunk::Forwarder::Service] Info: Class[Splunk::Forwarder::Config]: Scheduling refresh of Class[Splunk::Forwarder::Service] Info: Class[Splunk::Forwarder::Service]: Scheduling refresh of Service[SplunkForwarder] �[mNotice: /Stage[main]/Splunk::Forwarder::Service/Service[SplunkForwarder]: Triggered 'refresh' from 1 event �[mNotice: Applied catalog in 41.41 seconds

splunk::forwarder class Splunk forwarder version 7.2.4.2 works idempotently with no errors Failure/Error: apply_manifest(pp, catch_failures: true) Beaker::Host::CommandFailure: Host 'rocky8-64-puppet8.example.com' exited with 6 running: puppet apply --verbose --detailed-exitcodes /tmp/apply_manifest_180359968.5QSzGQ.pp Last 10 lines of output were: Error: /Stage[main]/Splunk::Forwarder::Service/Service[SplunkForwarder]/ensure: change from 'stopped' to 'running' failed: Systemd start for SplunkForwarder failed! journalctl log for SplunkForwarder: -- Logs begin at Thu 2024-10-24 17:56:51 UTC, end at Thu 2024-10-24 18:04:04 UTC. -- -- No entries -- �[mNotice: /Stage[main]/Splunk::Forwarder::Service/Service[SplunkForwarder]: Triggered 'refresh' from 1 event Info: Class[Splunk::Forwarder::Service]: Unscheduling all events on Class[Splunk::Forwarder::Service] Info: Class[Splunk::Forwarder]: Unscheduling all events on Class[Splunk::Forwarder] Info: Stage[main]: Unscheduling all events on Stage[main] �[mNotice: Applied catalog in 1.93 seconds

splunk::forwarder class Splunk forwarder version 7.2.4.2 Service "SplunkForwarder" is expected to be enabled Failure/Error: it { is_expected.to be_enabled } expected Service "SplunkForwarder" to be enabled

splunk::forwarder class Splunk forwarder version 7.2.4.2 Service "SplunkForwarder" is expected to be running Failure/Error: it { is_expected.to be_running } expected Service "SplunkForwarder" to be running

splunk::forwarder class Splunk forwarder version 9.0.0 works idempotently with no errors Failure/Error: apply_manifest(pp, catch_failures: true) Beaker::Host::CommandFailure: Host 'rocky8-64-puppet8.example.com' exited with 6 running: puppet apply --verbose --detailed-exitcodes /tmp/apply_manifest_180406872.ufy8mQ.pp Last 10 lines of output were: Error: /Stage[main]/Splunk::Forwarder::Service/Service[SplunkForwarder]/ensure: change from 'stopped' to 'running' failed: Systemd start for SplunkForwarder failed! journalctl log for SplunkForwarder: -- Logs begin at Thu 2024-10-24 17:56:51 UTC, end at Thu 2024-10-24 18:04:10 UTC. -- -- No entries -- �[mNotice: /Stage[main]/Splunk::Forwarder::Service/Service[SplunkForwarder]: Triggered 'refresh' from 1 event Info: Class[Splunk::Forwarder::Service]: Unscheduling all events on Class[Splunk::Forwarder::Service] Info: Class[Splunk::Forwarder]: Unscheduling all events on Class[Splunk::Forwarder] Info: Stage[main]: Unscheduling all events on Stage[main] �[mNotice: Applied catalog in 1.61 seconds

splunk::forwarder class Splunk forwarder version 9.0.0 Service "SplunkForwarder" is expected to be enabled Failure/Error: it { is_expected.to be_enabled } expected Service "SplunkForwarder" to be enabled

splunk::forwarder class Splunk forwarder version 9.0.0 Service "SplunkForwarder" is expected to be running Failure/Error: it { is_expected.to be_running } expected Service "SplunkForwarder" to be running

splunk::forwarder class default parameters works idempotently with no errors Failure/Error: apply_manifest(pp, catch_failures: true) Beaker::Host::CommandFailure: Host 'rocky8-64-puppet8.example.com' exited with 6 running: puppet apply --verbose --detailed-exitcodes /tmp/apply_manifest_180413521.KkMtfp.pp Last 10 lines of output were: Oct 24 18:04:17 rocky8-64-puppet8.example.com splunk[9311]: Warning: Executing "chown -R splunk:splunk /opt/splunkforwarder" Oct 24 18:04:17 rocky8-64-puppet8.example.com systemd[1]: SplunkForwarder.service: Main process exited, code=exited, status=2/INVALIDARGUMENT Oct 24 18:04:17 rocky8-64-puppet8.example.com systemd[1]: SplunkForwarder.service: Failed with result 'exit-code'. Oct 24 18:04:17 rocky8-64-puppet8.example.com systemd[1]: Failed to start Systemd service file for Splunk, generated by 'splunk enable boot-start'. �[mNotice: /Stage[main]/Splunk::Forwarder::Service/Service[SplunkForwarder]: Triggered 'refresh' from 1 event Info: Class[Splunk::Forwarder::Service]: Unscheduling all events on Class[Splunk::Forwarder::Service] Info: Class[Splunk::Forwarder]: Unscheduling all events on Class[Splunk::Forwarder] Info: Stage[main]: Unscheduling all events on Stage[main] �[mNotice: Applied catalog in 1.67 seconds

splunk::forwarder class default parameters File "/opt/splunkforwarder/etc/system/local/outputs.conf" content is expected to match /^sslPassword = \$7\$/ Failure/Error: its(:content) { is_expected.to match %r{^sslPassword = \$7\$} } expected "[default]\ndefaultGroup=splunk_9997\n\n[tcpout:splunk_9997]\nserver=splunk:9997\n\n[tcpout:splunkcloud]\nsslPassword=super_secure_password\n" to match /^sslPassword = \$7\$/ Diff: @@ -1,8 +1,15 @@ -/^sslPassword = \$7\$/ +[default] +defaultGroup=splunk_9997 + +[tcpout:splunk_9997] +server=splunk:9997 + +[tcpout:splunkcloud] +sslPassword=super_secure_password

splunk::forwarder class default parameters Service "SplunkForwarder" is expected to be running Failure/Error: it { is_expected.to be_running } expected Service "SplunkForwarder" to be running

splunk::forwarder class purging purge_outputs => false works idempotently with no errors Failure/Error: apply_manifest(pp, catch_changes: true) Beaker::Host::CommandFailure: Host 'rocky8-64-puppet8.example.com' exited with 2 running: puppet apply --verbose --detailed-exitcodes /tmp/apply_manifest_180420513.aemteV.pp Last 10 lines of output were: Info: /Stage[main]/Splunk::Forwarder::Config/File[/opt/splunkforwarder/etc/system/local/server.conf]: Scheduling refresh of Class[Splunk::Forwarder::Service] Info: /Stage[main]/Splunk::Forwarder::Config/File[/opt/splunkforwarder/etc/system/local/server.conf]: Scheduling refresh of Class[Splunk::Forwarder::Service] Info: /Stage[main]/Splunk::Forwarder::Config/File[/opt/splunkforwarder/etc/system/local/server.conf]: Scheduling refresh of Class[Splunk::Forwarder::Service] Info: /Stage[main]/Splunk::Forwarder::Config/File[/opt/splunkforwarder/etc/system/local/server.conf]: Scheduling refresh of Class[Splunk::Forwarder::Service] Info: /Stage[main]/Splunk::Forwarder::Config/File[/opt/splunkforwarder/etc/system/local/server.conf]: Scheduling refresh of Class[Splunk::Forwarder::Service] Info: /Stage[main]/Splunk::Forwarder::Config/File[/opt/splunkforwarder/etc/system/local/server.conf]: Scheduling refresh of Class[Splunk::Forwarder::Service] Info: Class[Splunk::Forwarder::Config]: Scheduling refresh of Class[Splunk::Forwarder::Service] Info: Class[Splunk::Forwarder::Service]: Scheduling refresh of Service[SplunkForwarder] �[mNotice: /Stage[main]/Splunk::Forwarder::Service/Service[SplunkForwarder]: Triggered 'refresh' from 1 event �[mNotice: Applied catalog in 24.14 seconds

splunk::forwarder class Splunk forwarder version 7.2.4.2 works idempotently with no errors Failure/Error: apply_manifest(pp, catch_failures: true) Beaker::Host::CommandFailure: Host 'almalinux9-64-puppet8.example.com' exited with 6 running: puppet apply --verbose --detailed-exitcodes /tmp/apply_manifest_180341665.pWkTjF.pp Last 10 lines of output were: Error: /Stage[main]/Splunk::Forwarder::Service/Service[SplunkForwarder]/ensure: change from 'stopped' to 'running' failed: Systemd start for SplunkForwarder failed! journalctl log for SplunkForwarder: -- No entries -- �[mNotice: /Stage[main]/Splunk::Forwarder::Service/Service[SplunkForwarder]: Triggered 'refresh' from 1 event Info: Class[Splunk::Forwarder::Service]: Unscheduling all events on Class[Splunk::Forwarder::Service] Info: Class[Splunk::Forwarder]: Unscheduling all events on Class[Splunk::Forwarder] Info: Stage[main]: Unscheduling all events on Stage[main] �[mNotice: Applied catalog in 2.12 seconds

splunk::forwarder class Splunk forwarder version 7.2.4.2 Service "SplunkForwarder" is expected to be enabled Failure/Error: it { is_expected.to be_enabled } expected Service "SplunkForwarder" to be enabled

splunk::forwarder class Splunk forwarder version 7.2.4.2 Service "SplunkForwarder" is expected to be running Failure/Error: it { is_expected.to be_running } expected Service "SplunkForwarder" to be running

splunk::forwarder class Splunk forwarder version 9.0.0 works idempotently with no errors Failure/Error: apply_manifest(pp, catch_failures: true) Beaker::Host::CommandFailure: Host 'almalinux9-64-puppet8.example.com' exited with 6 running: puppet apply --verbose --detailed-exitcodes /tmp/apply_manifest_180348655.H2krcW.pp Last 10 lines of output were: Error: /Stage[main]/Splunk::Forwarder::Service/Service[SplunkForwarder]/ensure: change from 'stopped' to 'running' failed: Systemd start for SplunkForwarder failed! journalctl log for SplunkForwarder: -- No entries -- �[mNotice: /Stage[main]/Splunk::Forwarder::Service/Service[SplunkForwarder]: Triggered 'refresh' from 1 event Info: Class[Splunk::Forwarder::Service]: Unscheduling all events on Class[Splunk::Forwarder::Service] Info: Class[Splunk::Forwarder]: Unscheduling all events on Class[Splunk::Forwarder] Info: Stage[main]: Unscheduling all events on Stage[main] �[mNotice: Applied catalog in 2.82 seconds

splunk::forwarder class Splunk forwarder version 9.0.0 Service "SplunkForwarder" is expected to be enabled Failure/Error: it { is_expected.to be_enabled } expected Service "SplunkForwarder" to be enabled

splunk::forwarder class Splunk forwarder version 9.0.0 Service "SplunkForwarder" is expected to be running Failure/Error: it { is_expected.to be_running } expected Service "SplunkForwarder" to be running

splunk::forwarder class default parameters works idempotently with no errors Failure/Error: apply_manifest(pp, catch_failures: true) Beaker::Host::CommandFailure: Host 'almalinux9-64-puppet8.example.com' exited with 6 running: puppet apply --verbose --detailed-exitcodes /tmp/apply_manifest_180356510.tRBYsm.pp Last 10 lines of output were: Oct 24 18:04:01 almalinux9-64-puppet8.example.com splunk[10402]: Warning: Executing "chown -R splunk:splunk /opt/splunkforwarder" Oct 24 18:04:01 almalinux9-64-puppet8.example.com systemd[1]: SplunkForwarder.service: Main process exited, code=exited, status=2/INVALIDARGUMENT Oct 24 18:04:01 almalinux9-64-puppet8.example.com systemd[1]: SplunkForwarder.service: Failed with result 'exit-code'. Oct 24 18:04:01 almalinux9-64-puppet8.example.com systemd[1]: Failed to start Systemd service file for Splunk, generated by 'splunk enable boot-start'. �[mNotice: /Stage[main]/Splunk::Forwarder::Service/Service[SplunkForwarder]: Triggered 'refresh' from 1 event Info: Class[Splunk::Forwarder::Service]: Unscheduling all events on Class[Splunk::Forwarder::Service] Info: Class[Splunk::Forwarder]: Unscheduling all events on Class[Splunk::Forwarder] Info: Stage[main]: Unscheduling all events on Stage[main] �[mNotice: Applied catalog in 2.75 seconds

splunk::forwarder class default parameters File "/opt/splunkforwarder/etc/system/local/outputs.conf" content is expected to match /^sslPassword = \$7\$/ Failure/Error: its(:content) { is_expected.to match %r{^sslPassword = \$7\$} } expected "[default]\ndefaultGroup=splunk_9997\n\n[tcpout:splunk_9997]\nserver=splunk:9997\n\n[tcpout:splunkcloud]\nsslPassword=super_secure_password\n" to match /^sslPassword = \$7\$/ Diff: @@ -1,8 +1,15 @@ -/^sslPassword = \$7\$/ +[default] +defaultGroup=splunk_9997 + +[tcpout:splunk_9997] +server=splunk:9997 + +[tcpout:splunkcloud] +sslPassword=super_secure_password

splunk::forwarder class default parameters Service "SplunkForwarder" is expected to be running Failure/Error: it { is_expected.to be_running } expected Service "SplunkForwarder" to be running

splunk::forwarder class purging purge_outputs => false works idempotently with no errors Failure/Error: apply_manifest(pp, catch_changes: true) Beaker::Host::CommandFailure: Host 'almalinux9-64-puppet8.example.com' exited with 2 running: puppet apply --verbose --detailed-exitcodes /tmp/apply_manifest_180404500.9i6asd.pp Last 10 lines of output were: Info: /Stage[main]/Splunk::Forwarder::Config/File[/opt/splunkforwarder/etc/system/local/server.conf]: Scheduling refresh of Class[Splunk::Forwarder::Service] Info: /Stage[main]/Splunk::Forwarder::Config/File[/opt/splunkforwarder/etc/system/local/server.conf]: Scheduling refresh of Class[Splunk::Forwarder::Service] Info: /Stage[main]/Splunk::Forwarder::Config/File[/opt/splunkforwarder/etc/system/local/server.conf]: Scheduling refresh of Class[Splunk::Forwarder::Service] Info: /Stage[main]/Splunk::Forwarder::Config/File[/opt/splunkforwarder/etc/system/local/server.conf]: Scheduling refresh of Class[Splunk::Forwarder::Service] Info: /Stage[main]/Splunk::Forwarder::Config/File[/opt/splunkforwarder/etc/system/local/server.conf]: Scheduling refresh of Class[Splunk::Forwarder::Service] Info: /Stage[main]/Splunk::Forwarder::Config/File[/opt/splunkforwarder/etc/system/local/server.conf]: Scheduling refresh of Class[Splunk::Forwarder::Service] Info: Class[Splunk::Forwarder::Config]: Scheduling refresh of Class[Splunk::Forwarder::Service] Info: Class[Splunk::Forwarder::Service]: Scheduling refresh of Service[SplunkForwarder] �[mNotice: /Stage[main]/Splunk::Forwarder::Service/Service[SplunkForwarder]: Triggered 'refresh' from 1 event �[mNotice: Applied catalog in 41.37 seconds

splunk::forwarder class Splunk forwarder version 7.2.4.2 works idempotently with no errors Failure/Error: apply_manifest(pp, catch_failures: true) Beaker::Host::CommandFailure: Host 'almalinux9-64-puppet7.example.com' exited with 6 running: puppet apply --verbose --detailed-exitcodes /tmp/apply_manifest_180408102.5wtTcM.pp Last 10 lines of output were: Error: /Stage[main]/Splunk::Forwarder::Service/Service[SplunkForwarder]/ensure: change from 'stopped' to 'running' failed: Systemd start for SplunkForwarder failed! journalctl log for SplunkForwarder: -- No entries -- �[mNotice: /Stage[main]/Splunk::Forwarder::Service/Service[SplunkForwarder]: Triggered 'refresh' from 1 event Info: Class[Splunk::Forwarder::Service]: Unscheduling all events on Class[Splunk::Forwarder::Service] Info: Class[Splunk::Forwarder]: Unscheduling all events on Class[Splunk::Forwarder] Info: Stage[main]: Unscheduling all events on Stage[main] �[mNotice: Applied catalog in 1.18 seconds

splunk::forwarder class Splunk forwarder version 7.2.4.2 Service "SplunkForwarder" is expected to be enabled Failure/Error: it { is_expected.to be_enabled } expected Service "SplunkForwarder" to be enabled

splunk::forwarder class Splunk forwarder version 7.2.4.2 Service "SplunkForwarder" is expected to be running Failure/Error: it { is_expected.to be_running } expected Service "SplunkForwarder" to be running

splunk::forwarder class Splunk forwarder version 9.0.0 works idempotently with no errors Failure/Error: apply_manifest(pp, catch_failures: true) Beaker::Host::CommandFailure: Host 'almalinux9-64-puppet7.example.com' exited with 6 running: puppet apply --verbose --detailed-exitcodes /tmp/apply_manifest_180414037.s4ux50.pp Last 10 lines of output were: Error: /Stage[main]/Splunk::Forwarder::Service/Service[SplunkForwarder]/ensure: change from 'stopped' to 'running' failed: Systemd start for SplunkForwarder failed! journalctl log for SplunkForwarder: -- No entries -- �[mNotice: /Stage[main]/Splunk::Forwarder::Service/Service[SplunkForwarder]: Triggered 'refresh' from 1 event Info: Class[Splunk::Forwarder::Service]: Unscheduling all events on Class[Splunk::Forwarder::Service] Info: Class[Splunk::Forwarder]: Unscheduling all events on Class[Splunk::Forwarder] Info: Stage[main]: Unscheduling all events on Stage[main] �[mNotice: Applied catalog in 1.69 seconds

splunk::forwarder class Splunk forwarder version 9.0.0 Service "SplunkForwarder" is expected to be enabled Failure/Error: it { is_expected.to be_enabled } expected Service "SplunkForwarder" to be enabled

splunk::forwarder class Splunk forwarder version 9.0.0 Service "SplunkForwarder" is expected to be running Failure/Error: it { is_expected.to be_running } expected Service "SplunkForwarder" to be running

splunk::forwarder class default parameters works idempotently with no errors Failure/Error: apply_manifest(pp, catch_failures: true) Beaker::Host::CommandFailure: Host 'almalinux9-64-puppet7.example.com' exited with 6 running: puppet apply --verbose --detailed-exitcodes /tmp/apply_manifest_180420469.SgBA4D.pp Last 10 lines of output were: Oct 24 18:04:24 almalinux9-64-puppet7.example.com splunk[10414]: Warning: Executing "chown -R splunk:splunk /opt/splunkforwarder" Oct 24 18:04:24 almalinux9-64-puppet7.example.com systemd[1]: SplunkForwarder.service: Main process exited, code=exited, status=2/INVALIDARGUMENT Oct 24 18:04:24 almalinux9-64-puppet7.example.com systemd[1]: SplunkForwarder.service: Failed with result 'exit-code'. Oct 24 18:04:24 almalinux9-64-puppet7.example.com systemd[1]: Failed to start Systemd service file for Splunk, generated by 'splunk enable boot-start'. �[mNotice: /Stage[main]/Splunk::Forwarder::Service/Service[SplunkForwarder]: Triggered 'refresh' from 1 event Info: Class[Splunk::Forwarder::Service]: Unscheduling all events on Class[Splunk::Forwarder::Service] Info: Class[Splunk::Forwarder]: Unscheduling all events on Class[Splunk::Forwarder] Info: Stage[main]: Unscheduling all events on Stage[main] �[mNotice: Applied catalog in 1.86 seconds

splunk::forwarder class default parameters File "/opt/splunkforwarder/etc/system/local/outputs.conf" content is expected to match /^sslPassword = \$7\$/ Failure/Error: its(:content) { is_expected.to match %r{^sslPassword = \$7\$} } expected "[default]\ndefaultGroup=splunk_9997\n\n[tcpout:splunk_9997]\nserver=splunk:9997\n\n[tcpout:splunkcloud]\nsslPassword=super_secure_password\n" to match /^sslPassword = \$7\$/ Diff: @@ -1,8 +1,15 @@ -/^sslPassword = \$7\$/ +[default] +defaultGroup=splunk_9997 + +[tcpout:splunk_9997] +server=splunk:9997 + +[tcpout:splunkcloud] +sslPassword=super_secure_password

splunk::forwarder class default parameters Service "SplunkForwarder" is expected to be running Failure/Error: it { is_expected.to be_running } expected Service "SplunkForwarder" to be running

splunk::forwarder class purging purge_outputs => false works idempotently with no errors Failure/Error: apply_manifest(pp, catch_changes: true) Beaker::Host::CommandFailure: Host 'almalinux9-64-puppet7.example.com' exited with 2 running: puppet apply --verbose --detailed-exitcodes /tmp/apply_manifest_180427276.t1iLJm.pp Last 10 lines of output were: Info: /Stage[main]/Splunk::Forwarder::Config/File[/opt/splunkforwarder/etc/system/local/server.conf]: Scheduling refresh of Class[Splunk::Forwarder::Service] Info: /Stage[main]/Splunk::Forwarder::Config/File[/opt/splunkforwarder/etc/system/local/server.conf]: Scheduling refresh of Class[Splunk::Forwarder::Service] Info: /Stage[main]/Splunk::Forwarder::Config/File[/opt/splunkforwarder/etc/system/local/server.conf]: Scheduling refresh of Class[Splunk::Forwarder::Service] Info: /Stage[main]/Splunk::Forwarder::Config/File[/opt/splunkforwarder/etc/system/local/server.conf]: Scheduling refresh of Class[Splunk::Forwarder::Service] Info: /Stage[main]/Splunk::Forwarder::Config/File[/opt/splunkforwarder/etc/system/local/server.conf]: Scheduling refresh of Class[Splunk::Forwarder::Service] Info: /Stage[main]/Splunk::Forwarder::Config/File[/opt/splunkforwarder/etc/system/local/server.conf]: Scheduling refresh of Class[Splunk::Forwarder::Service] Info: Class[Splunk::Forwarder::Config]: Scheduling refresh of Class[Splunk::Forwarder::Service] Info: Class[Splunk::Forwarder::Service]: Scheduling refresh of Service[SplunkForwarder] �[mNotice: /Stage[main]/Splunk::Forwarder::Service/Service[SplunkForwarder]: Triggered 'refresh' from 1 event �[mNotice: Applied catalog in 22.35 seconds

splunk::forwarder class Splunk forwarder version 7.2.4.2 works idempotently with no errors Failure/Error: apply_manifest(pp, catch_failures: true) Beaker::Host::CommandFailure: Host 'centos9-64-puppet8.example.com' exited with 6 running: puppet apply --verbose --detailed-exitcodes /tmp/apply_manifest_180405067.Q9DlJL.pp Last 10 lines of output were: Error: /Stage[main]/Splunk::Forwarder::Service/Service[SplunkForwarder]/ensure: change from 'stopped' to 'running' failed: Systemd start for SplunkForwarder failed! journalctl log for SplunkForwarder: -- No entries -- �[mNotice: /Stage[main]/Splunk::Forwarder::Service/Service[SplunkForwarder]: Triggered 'refresh' from 1 event Info: Class[Splunk::Forwarder::Service]: Unscheduling all events on Class[Splunk::Forwarder::Service] Info: Class[Splunk::Forwarder]: Unscheduling all events on Class[Splunk::Forwarder] Info: Stage[main]: Unscheduling all events on Stage[main] �[mNotice: Applied catalog in 1.18 seconds

splunk::forwarder class Splunk forwarder version 7.2.4.2 Service "SplunkForwarder" is expected to be enabled Failure/Error: it { is_expected.to be_enabled } expected Service "SplunkForwarder" to be enabled

splunk::forwarder class Splunk forwarder version 7.2.4.2 Service "SplunkForwarder" is expected to be running Failure/Error: it { is_expected.to be_running } expected Service "SplunkForwarder" to be running

splunk::forwarder class Splunk forwarder version 9.0.0 works idempotently with no errors Failure/Error: apply_manifest(pp, catch_failures: true) Beaker::Host::CommandFailure: Host 'centos9-64-puppet8.example.com' exited with 6 running: puppet apply --verbose --detailed-exitcodes /tmp/apply_manifest_180411674.85QyQ6.pp Last 10 lines of output were: Error: /Stage[main]/Splunk::Forwarder::Service/Service[SplunkForwarder]/ensure: change from 'stopped' to 'running' failed: Systemd start for SplunkForwarder failed! journalctl log for SplunkForwarder: -- No entries -- �[mNotice: /Stage[main]/Splunk::Forwarder::Service/Service[SplunkForwarder]: Triggered 'refresh' from 1 event Info: Class[Splunk::Forwarder::Service]: Unscheduling all events on Class[Splunk::Forwarder::Service] Info: Class[Splunk::Forwarder]: Unscheduling all events on Class[Splunk::Forwarder] Info: Stage[main]: Unscheduling all events on Stage[main] �[mNotice: Applied catalog in 1.83 seconds

splunk::forwarder class Splunk forwarder version 9.0.0 Service "SplunkForwarder" is expected to be enabled Failure/Error: it { is_expected.to be_enabled } expected Service "SplunkForwarder" to be enabled

splunk::forwarder class Splunk forwarder version 9.0.0 Service "SplunkForwarder" is expected to be running Failure/Error: it { is_expected.to be_running } expected Service "SplunkForwarder" to be running

splunk::forwarder class default parameters works idempotently with no errors Failure/Error: apply_manifest(pp, catch_failures: true) Beaker::Host::CommandFailure: Host 'centos9-64-puppet8.example.com' exited with 6 running: puppet apply --verbose --detailed-exitcodes /tmp/apply_manifest_180418985.XMZ3eK.pp Last 10 lines of output were: Oct 24 18:04:23 centos9-64-puppet8.example.com splunk[9318]: Warning: Executing "chown -R splunk:splunk /opt/splunkforwarder" Oct 24 18:04:23 centos9-64-puppet8.example.com systemd[1]: SplunkForwarder.service: Main process exited, code=exited, status=2/INVALIDARGUMENT Oct 24 18:04:23 centos9-64-puppet8.example.com systemd[1]: SplunkForwarder.service: Failed with result 'exit-code'. Oct 24 18:04:23 centos9-64-puppet8.example.com systemd[1]: Failed to start Systemd service file for Splunk, generated by 'splunk enable boot-start'. �[mNotice: /Stage[main]/Splunk::Forwarder::Service/Service[SplunkForwarder]: Triggered 'refresh' from 1 event Info: Class[Splunk::Forwarder::Service]: Unscheduling all events on Class[Splunk::Forwarder::Service] Info: Class[Splunk::Forwarder]: Unscheduling all events on Class[Splunk::Forwarder] Info: Stage[main]: Unscheduling all events on Stage[main] �[mNotice: Applied catalog in 1.96 seconds

splunk::forwarder class default parameters File "/opt/splunkforwarder/etc/system/local/outputs.conf" content is expected to match /^sslPassword = \$7\$/ Failure/Error: its(:content) { is_expected.to match %r{^sslPassword = \$7\$} } expected "[default]\ndefaultGroup=splunk_9997\n\n[tcpout:splunk_9997]\nserver=splunk:9997\n\n[tcpout:splunkcloud]\nsslPassword=super_secure_password\n" to match /^sslPassword = \$7\$/ Diff: @@ -1,8 +1,15 @@ -/^sslPassword = \$7\$/ +[default] +defaultGroup=splunk_9997 + +[tcpout:splunk_9997] +server=splunk:9997 + +[tcpout:splunkcloud] +sslPassword=super_secure_password

splunk::forwarder class default parameters Service "SplunkForwarder" is expected to be running Failure/Error: it { is_expected.to be_running } expected Service "SplunkForwarder" to be running

splunk::forwarder class purging purge_outputs => false works idempotently with no errors Failure/Error: apply_manifest(pp, catch_changes: true) Beaker::Host::CommandFailure: Host 'centos9-64-puppet8.example.com' exited with 2 running: puppet apply --verbose --detailed-exitcodes /tmp/apply_manifest_180426520.8x1SKX.pp Last 10 lines of output were: Info: /Stage[main]/Splunk::Forwarder::Config/File[/opt/splunkforwarder/etc/system/local/server.conf]: Scheduling refresh of Class[Splunk::Forwarder::Service] Info: /Stage[main]/Splunk::Forwarder::Config/File[/opt/splunkforwarder/etc/system/local/server.conf]: Scheduling refresh of Class[Splunk::Forwarder::Service] Info: /Stage[main]/Splunk::Forwarder::Config/File[/opt/splunkforwarder/etc/system/local/server.conf]: Scheduling refresh of Class[Splunk::Forwarder::Service] Info: /Stage[main]/Splunk::Forwarder::Config/File[/opt/splunkforwarder/etc/system/local/server.conf]: Scheduling refresh of Class[Splunk::Forwarder::Service] Info: /Stage[main]/Splunk::Forwarder::Config/File[/opt/splunkforwarder/etc/system/local/server.conf]: Scheduling refresh of Class[Splunk::Forwarder::Service] Info: /Stage[main]/Splunk::Forwarder::Config/File[/opt/splunkforwarder/etc/system/local/server.conf]: Scheduling refresh of Class[Splunk::Forwarder::Service] Info: Class[Splunk::Forwarder::Config]: Scheduling refresh of Class[Splunk::Forwarder::Service] Info: Class[Splunk::Forwarder::Service]: Scheduling refresh of Service[SplunkForwarder] �[mNotice: /Stage[main]/Splunk::Forwarder::Service/Service[SplunkForwarder]: Triggered 'refresh' from 1 event �[mNotice: Applied catalog in 24.11 seconds

splunk::forwarder class Splunk forwarder version 7.2.4.2 works idempotently with no errors Failure/Error: apply_manifest(pp, catch_failures: true) Beaker::Host::CommandFailure: Host 'almalinux8-64-puppet7.example.com' exited with 6 running: puppet apply --verbose --detailed-exitcodes /tmp/apply_manifest_180400465.CYWMa5.pp Last 10 lines of output were: Error: /Stage[main]/Splunk::Forwarder::Service/Service[SplunkForwarder]/ensure: change from 'stopped' to 'running' failed: Systemd start for SplunkForwarder failed! journalctl log for SplunkForwarder: -- Logs begin at Thu 2024-10-24 17:56:47 UTC, end at Thu 2024-10-24 18:04:04 UTC. -- -- No entries -- �[mNotice: /Stage[main]/Splunk::Forwarder::Service/Service[SplunkForwarder]: Triggered 'refresh' from 1 event Info: Class[Splunk::Forwarder::Service]: Unscheduling all events on Class[Splunk::Forwarder::Service] Info: Class[Splunk::Forwarder]: Unscheduling all events on Class[Splunk::Forwarder] Info: Stage[main]: Unscheduling all events on Stage[main] �[mNotice: Applied catalog in 1.72 seconds

splunk::forwarder class Splunk forwarder version 7.2.4.2 Service "SplunkForwarder" is expected to be enabled Failure/Error: it { is_expected.to be_enabled } expected Service "SplunkForwarder" to be enabled

splunk::forwarder class Splunk forwarder version 7.2.4.2 Service "SplunkForwarder" is expected to be running Failure/Error: it { is_expected.to be_running } expected Service "SplunkForwarder" to be running

splunk::forwarder class Splunk forwarder version 9.0.0 works idempotently with no errors Failure/Error: apply_manifest(pp, catch_failures: true) Beaker::Host::CommandFailure: Host 'almalinux8-64-puppet7.example.com' exited with 6 running: puppet apply --verbose --detailed-exitcodes /tmp/apply_manifest_180406729.AUsfbp.pp Last 10 lines of output were: Error: /Stage[main]/Splunk::Forwarder::Service/Service[SplunkForwarder]/ensure: change from 'stopped' to 'running' failed: Systemd start for SplunkForwarder failed! journalctl log for SplunkForwarder: -- Logs begin at Thu 2024-10-24 17:56:47 UTC, end at Thu 2024-10-24 18:04:10 UTC. -- -- No entries -- �[mNotice: /Stage[main]/Splunk::Forwarder::Service/Service[SplunkForwarder]: Triggered 'refresh' from 1 event Info: Class[Splunk::Forwarder::Service]: Unscheduling all events on Class[Splunk::Forwarder::Service] Info: Class[Splunk::Forwarder]: Unscheduling all events on Class[Splunk::Forwarder] Info: Stage[main]: Unscheduling all events on Stage[main] �[mNotice: Applied catalog in 1.60 seconds

splunk::forwarder class Splunk forwarder version 9.0.0 Service "SplunkForwarder" is expected to be enabled Failure/Error: it { is_expected.to be_enabled } expected Service "SplunkForwarder" to be enabled

splunk::forwarder class Splunk forwarder version 9.0.0 Service "SplunkForwarder" is expected to be running Failure/Error: it { is_expected.to be_running } expected Service "SplunkForwarder" to be running

splunk::forwarder class default parameters works idempotently with no errors Failure/Error: apply_manifest(pp, catch_failures: true) Beaker::Host::CommandFailure: Host 'almalinux8-64-puppet7.example.com' exited with 6 running: puppet apply --verbose --detailed-exitcodes /tmp/apply_manifest_180413039.o5jFyT.pp Last 10 lines of output were: Oct 24 18:04:16 almalinux8-64-puppet7.example.com splunk[9737]: Warning: Executing "chown -R splunk:splunk /opt/splunkforwarder" Oct 24 18:04:16 almalinux8-64-puppet7.example.com systemd[1]: SplunkForwarder.service: Main process exited, code=exited, status=2/INVALIDARGUMENT Oct 24 18:04:16 almalinux8-64-puppet7.example.com systemd[1]: SplunkForwarder.service: Failed with result 'exit-code'. Oct 24 18:04:16 almalinux8-64-puppet7.example.com systemd[1]: Failed to start Systemd service file for Splunk, generated by 'splunk enable boot-start'. �[mNotice: /Stage[main]/Splunk::Forwarder::Service/Service[SplunkForwarder]: Triggered 'refresh' from 1 event Info: Class[Splunk::Forwarder::Service]: Unscheduling all events on Class[Splunk::Forwarder::Service] Info: Class[Splunk::Forwarder]: Unscheduling all events on Class[Splunk::Forwarder] Info: Stage[main]: Unscheduling all events on Stage[main] �[mNotice: Applied catalog in 1.63 seconds

splunk::forwarder class default parameters File "/opt/splunkforwarder/etc/system/local/outputs.conf" content is expected to match /^sslPassword = \$7\$/ Failure/Error: its(:content) { is_expected.to match %r{^sslPassword = \$7\$} } expected "[default]\ndefaultGroup=splunk_9997\n\n[tcpout:splunk_9997]\nserver=splunk:9997\n\n[tcpout:splunkcloud]\nsslPassword=super_secure_password\n" to match /^sslPassword = \$7\$/ Diff: @@ -1,8 +1,15 @@ -/^sslPassword = \$7\$/ +[default] +defaultGroup=splunk_9997 + +[tcpout:splunk_9997] +server=splunk:9997 + +[tcpout:splunkcloud] +sslPassword=super_secure_password

splunk::forwarder class default parameters Service "SplunkForwarder" is expected to be running Failure/Error: it { is_expected.to be_running } expected Service "SplunkForwarder" to be running

splunk::forwarder class purging purge_outputs => false works idempotently with no errors Failure/Error: apply_manifest(pp, catch_changes: true) Beaker::Host::CommandFailure: Host 'almalinux8-64-puppet7.example.com' exited with 2 running: puppet apply --verbose --detailed-exitcodes /tmp/apply_manifest_180419471.fsVEYW.pp Last 10 lines of output were: Info: /Stage[main]/Splunk::Forwarder::Config/File[/opt/splunkforwarder/etc/system/local/server.conf]: Scheduling refresh of Class[Splunk::Forwarder::Service] Info: /Stage[main]/Splunk::Forwarder::Config/File[/opt/splunkforwarder/etc/system/local/server.conf]: Scheduling refresh of Class[Splunk::Forwarder::Service] Info: /Stage[main]/Splunk::Forwarder::Config/File[/opt/splunkforwarder/etc/system/local/server.conf]: Scheduling refresh of Class[Splunk::Forwarder::Service] Info: /Stage[main]/Splunk::Forwarder::Config/File[/opt/splunkforwarder/etc/system/local/server.conf]: Scheduling refresh of Class[Splunk::Forwarder::Service] Info: /Stage[main]/Splunk::Forwarder::Config/File[/opt/splunkforwarder/etc/system/local/server.conf]: Scheduling refresh of Class[Splunk::Forwarder::Service] Info: /Stage[main]/Splunk::Forwarder::Config/File[/opt/splunkforwarder/etc/system/local/server.conf]: Scheduling refresh of Class[Splunk::Forwarder::Service] Info: Class[Splunk::Forwarder::Config]: Scheduling refresh of Class[Splunk::Forwarder::Service] Info: Class[Splunk::Forwarder::Service]: Scheduling refresh of Service[SplunkForwarder] �[mNotice: /Stage[main]/Splunk::Forwarder::Service/Service[SplunkForwarder]: Triggered 'refresh' from 1 event �[mNotice: Applied catalog in 41.41 seconds

splunk::forwarder class Splunk forwarder version 7.2.4.2 works idempotently with no errors Failure/Error: apply_manifest(pp, catch_failures: true) Beaker::Host::CommandFailure: Host 'rocky8-64-puppet7.example.com' exited with 6 running: puppet apply --verbose --detailed-exitcodes /tmp/apply_manifest_180359989.s4GSHu.pp Last 10 lines of output were: Error: /Stage[main]/Splunk::Forwarder::Service/Service[SplunkForwarder]/ensure: change from 'stopped' to 'running' failed: Systemd start for SplunkForwarder failed! journalctl log for SplunkForwarder: -- Logs begin at Thu 2024-10-24 17:56:48 UTC, end at Thu 2024-10-24 18:04:04 UTC. -- -- No entries -- �[mNotice: /Stage[main]/Splunk::Forwarder::Service/Service[SplunkForwarder]: Triggered 'refresh' from 1 event Info: Class[Splunk::Forwarder::Service]: Unscheduling all events on Class[Splunk::Forwarder::Service] Info: Class[Splunk::Forwarder]: Unscheduling all events on Class[Splunk::Forwarder] Info: Stage[main]: Unscheduling all events on Stage[main] �[mNotice: Applied catalog in 2.05 seconds

splunk::forwarder class Splunk forwarder version 7.2.4.2 Service "SplunkForwarder" is expected to be enabled Failure/Error: it { is_expected.to be_enabled } expected Service "SplunkForwarder" to be enabled

splunk::forwarder class Splunk forwarder version 7.2.4.2 Service "SplunkForwarder" is expected to be running Failure/Error: it { is_expected.to be_running } expected Service "SplunkForwarder" to be running

splunk::forwarder class Splunk forwarder version 9.0.0 works idempotently with no errors Failure/Error: apply_manifest(pp, catch_failures: true) Beaker::Host::CommandFailure: Host 'rocky8-64-puppet7.example.com' exited with 6 running: puppet apply --verbose --detailed-exitcodes /tmp/apply_manifest_180406817.xPvnsb.pp Last 10 lines of output were: Error: /Stage[main]/Splunk::Forwarder::Service/Service[SplunkForwarder]/ensure: change from 'stopped' to 'running' failed: Systemd start for SplunkForwarder failed! journalctl log for SplunkForwarder: -- Logs begin at Thu 2024-10-24 17:56:48 UTC, end at Thu 2024-10-24 18:04:10 UTC. -- -- No entries -- �[mNotice: /Stage[main]/Splunk::Forwarder::Service/Service[SplunkForwarder]: Triggered 'refresh' from 1 event Info: Class[Splunk::Forwarder::Service]: Unscheduling all events on Class[Splunk::Forwarder::Service] Info: Class[Splunk::Forwarder]: Unscheduling all events on Class[Splunk::Forwarder] Info: Stage[main]: Unscheduling all events on Stage[main] �[mNotice: Applied catalog in 1.56 seconds

splunk::forwarder class Splunk forwarder version 9.0.0 Service "SplunkForwarder" is expected to be enabled Failure/Error: it { is_expected.to be_enabled } expected Service "SplunkForwarder" to be enabled

splunk::forwarder class Splunk forwarder version 9.0.0 Service "SplunkForwarder" is expected to be running Failure/Error: it { is_expected.to be_running } expected Service "SplunkForwarder" to be running

splunk::forwarder class default parameters works idempotently with no errors Failure/Error: apply_manifest(pp, catch_failures: true) Beaker::Host::CommandFailure: Host 'rocky8-64-puppet7.example.com' exited with 6 running: puppet apply --verbose --detailed-exitcodes /tmp/apply_manifest_180413298.IrVhXr.pp Last 10 lines of output were: Oct 24 18:04:16 rocky8-64-puppet7.example.com splunk[9318]: Warning: Executing "chown -R splunk:splunk /opt/splunkforwarder" Oct 24 18:04:16 rocky8-64-puppet7.example.com systemd[1]: SplunkForwarder.service: Main process exited, code=exited, status=2/INVALIDARGUMENT Oct 24 18:04:16 rocky8-64-puppet7.example.com systemd[1]: SplunkForwarder.service: Failed with result 'exit-code'. Oct 24 18:04:16 rocky8-64-puppet7.example.com systemd[1]: Failed to start Systemd service file for Splunk, generated by 'splunk enable boot-start'. �[mNotice: /Stage[main]/Splunk::Forwarder::Service/Service[SplunkForwarder]: Triggered 'refresh' from 1 event Info: Class[Splunk::Forwarder::Service]: Unscheduling all events on Class[Splunk::Forwarder::Service] Info: Class[Splunk::Forwarder]: Unscheduling all events on Class[Splunk::Forwarder] Info: Stage[main]: Unscheduling all events on Stage[main] �[mNotice: Applied catalog in 1.63 seconds

splunk::forwarder class default parameters File "/opt/splunkforwarder/etc/system/local/outputs.conf" content is expected to match /^sslPassword = \$7\$/ Failure/Error: its(:content) { is_expected.to match %r{^sslPassword = \$7\$} } expected "[default]\ndefaultGroup=splunk_9997\n\n[tcpout:splunk_9997]\nserver=splunk:9997\n\n[tcpout:splunkcloud]\nsslPassword=super_secure_password\n" to match /^sslPassword = \$7\$/ Diff: @@ -1,8 +1,15 @@ -/^sslPassword = \$7\$/ +[default] +defaultGroup=splunk_9997 + +[tcpout:splunk_9997] +server=splunk:9997 + +[tcpout:splunkcloud] +sslPassword=super_secure_password

splunk::forwarder class default parameters Service "SplunkForwarder" is expected to be running Failure/Error: it { is_expected.to be_running } expected Service "SplunkForwarder" to be running

splunk::forwarder class purging purge_outputs => false works idempotently with no errors Failure/Error: apply_manifest(pp, catch_changes: true) Beaker::Host::CommandFailure: Host 'rocky8-64-puppet7.example.com' exited with 2 running: puppet apply --verbose --detailed-exitcodes /tmp/apply_manifest_180420042.t9qmCd.pp Last 10 lines of output were: Info: /Stage[main]/Splunk::Forwarder::Config/File[/opt/splunkforwarder/etc/system/local/server.conf]: Scheduling refresh of Class[Splunk::Forwarder::Service] Info: /Stage[main]/Splunk::Forwarder::Config/File[/opt/splunkforwarder/etc/system/local/server.conf]: Scheduling refresh of Class[Splunk::Forwarder::Service] Info: /Stage[main]/Splunk::Forwarder::Config/File[/opt/splunkforwarder/etc/system/local/server.conf]: Scheduling refresh of Class[Splunk::Forwarder::Service] Info: /Stage[main]/Splunk::Forwarder::Config/File[/opt/splunkforwarder/etc/system/local/server.conf]: Scheduling refresh of Class[Splunk::Forwarder::Service] Info: /Stage[main]/Splunk::Forwarder::Config/File[/opt/splunkforwarder/etc/system/local/server.conf]: Scheduling refresh of Class[Splunk::Forwarder::Service] Info: /Stage[main]/Splunk::Forwarder::Config/File[/opt/splunkforwarder/etc/system/local/server.conf]: Scheduling refresh of Class[Splunk::Forwarder::Service] Info: Class[Splunk::Forwarder::Config]: Scheduling refresh of Class[Splunk::Forwarder::Service] Info: Class[Splunk::Forwarder::Service]: Scheduling refresh of Service[SplunkForwarder] �[mNotice: /Stage[main]/Splunk::Forwarder::Service/Service[SplunkForwarder]: Triggered 'refresh' from 1 event �[mNotice: Applied catalog in 41.46 seconds

splunk::forwarder class Splunk forwarder version 7.2.4.2 works idempotently with no errors Failure/Error: apply_manifest(pp, catch_failures: true) Beaker::Host::CommandFailure: Host 'rocky9-64-puppet7.example.com' exited with 6 running: puppet apply --verbose --detailed-exitcodes /tmp/apply_manifest_180404865.nZrp0i.pp Last 10 lines of output were: Error: /Stage[main]/Splunk::Forwarder::Service/Service[SplunkForwarder]/ensure: change from 'stopped' to 'running' failed: Systemd start for SplunkForwarder failed! journalctl log for SplunkForwarder: -- No entries -- �[mNotice: /Stage[main]/Splunk::Forwarder::Service/Service[SplunkForwarder]: Triggered 'refresh' from 1 event Info: Class[Splunk::Forwarder::Service]: Unscheduling all events on Class[Splunk::Forwarder::Service] Info: Class[Splunk::Forwarder]: Unscheduling all events on Class[Splunk::Forwarder] Info: Stage[main]: Unscheduling all events on Stage[main] �[mNotice: Applied catalog in 1.42 seconds

splunk::forwarder class Splunk forwarder version 7.2.4.2 Service "SplunkForwarder" is expected to be enabled Failure/Error: it { is_expected.to be_enabled } expected Service "SplunkForwarder" to be enabled

splunk::forwarder class Splunk forwarder version 7.2.4.2 Service "SplunkForwarder" is expected to be running Failure/Error: it { is_expected.to be_running } expected Service "SplunkForwarder" to be running

splunk::forwarder class Splunk forwarder version 9.0.0 works idempotently with no errors Failure/Error: apply_manifest(pp, catch_failures: true) Beaker::Host::CommandFailure: Host 'rocky9-64-puppet7.example.com' exited with 6 running: puppet apply --verbose --detailed-exitcodes /tmp/apply_manifest_180410942.gMgL2a.pp Last 10 lines of output were: Error: /Stage[main]/Splunk::Forwarder::Service/Service[SplunkForwarder]/ensure: change from 'stopped' to 'running' failed: Systemd start for SplunkForwarder failed! journalctl log for SplunkForwarder: -- No entries -- �[mNotice: /Stage[main]/Splunk::Forwarder::Service/Service[SplunkForwarder]: Triggered 'refresh' from 1 event Info: Class[Splunk::Forwarder::Service]: Unscheduling all events on Class[Splunk::Forwarder::Service] Info: Class[Splunk::Forwarder]: Unscheduling all events on Class[Splunk::Forwarder] Info: Stage[main]: Unscheduling all events on Stage[main] �[mNotice: Applied catalog in 2.02 seconds

splunk::forwarder class Splunk forwarder version 9.0.0 Service "SplunkForwarder" is expected to be enabled Failure/Error: it { is_expected.to be_enabled } expected Service "SplunkForwarder" to be enabled

splunk::forwarder class Splunk forwarder version 9.0.0 Service "SplunkForwarder" is expected to be running Failure/Error: it { is_expected.to be_running } expected Service "SplunkForwarder" to be running

splunk::forwarder class default parameters works idempotently with no errors Failure/Error: apply_manifest(pp, catch_failures: true) Beaker::Host::CommandFailure: Host 'rocky9-64-puppet7.example.com' exited with 6 running: puppet apply --verbose --detailed-exitcodes /tmp/apply_manifest_180417741.VOljPu.pp Last 10 lines of output were: Oct 24 18:04:21 rocky9-64-puppet7.example.com splunk[9997]: Warning: Executing "chown -R splunk:splunk /opt/splunkforwarder" Oct 24 18:04:21 rocky9-64-puppet7.example.com systemd[1]: SplunkForwarder.service: Main process exited, code=exited, status=2/INVALIDARGUMENT Oct 24 18:04:21 rocky9-64-puppet7.example.com systemd[1]: SplunkForwarder.service: Failed with result 'exit-code'. Oct 24 18:04:21 rocky9-64-puppet7.example.com systemd[1]: Failed to start Systemd service file for Splunk, generated by 'splunk enable boot-start'. �[mNotice: /Stage[main]/Splunk::Forwarder::Service/Service[SplunkForwarder]: Triggered 'refresh' from 1 event Info: Class[Splunk::Forwarder::Service]: Unscheduling all events on Class[Splunk::Forwarder::Service] Info: Class[Splunk::Forwarder]: Unscheduling all events on Class[Splunk::Forwarder] Info: Stage[main]: Unscheduling all events on Stage[main] �[mNotice: Applied catalog in 2.15 seconds

splunk::forwarder class default parameters File "/opt/splunkforwarder/etc/system/local/outputs.conf" content is expected to match /^sslPassword = \$7\$/ Failure/Error: its(:content) { is_expected.to match %r{^sslPassword = \$7\$} } expected "[default]\ndefaultGroup=splunk_9997\n\n[tcpout:splunk_9997]\nserver=splunk:9997\n\n[tcpout:splunkcloud]\nsslPassword=super_secure_password\n" to match /^sslPassword = \$7\$/ Diff: @@ -1,8 +1,15 @@ -/^sslPassword = \$7\$/ +[default] +defaultGroup=splunk_9997 + +[tcpout:splunk_9997] +server=splunk:9997 + +[tcpout:splunkcloud] +sslPassword=super_secure_password

splunk::forwarder class default parameters Service "SplunkForwarder" is expected to be running Failure/Error: it { is_expected.to be_running } expected Service "SplunkForwarder" to be running

splunk::forwarder class purging purge_outputs => false works idempotently with no errors Failure/Error: apply_manifest(pp, catch_changes: true) Beaker::Host::CommandFailure: Host 'rocky9-64-puppet7.example.com' exited with 2 running: puppet apply --verbose --detailed-exitcodes /tmp/apply_manifest_180424821.TzErAp.pp Last 10 lines of output were: Info: /Stage[main]/Splunk::Forwarder::Config/File[/opt/splunkforwarder/etc/system/local/server.conf]: Scheduling refresh of Class[Splunk::Forwarder::Service] Info: /Stage[main]/Splunk::Forwarder::Config/File[/opt/splunkforwarder/etc/system/local/server.conf]: Scheduling refresh of Class[Splunk::Forwarder::Service] Info: /Stage[main]/Splunk::Forwarder::Config/File[/opt/splunkforwarder/etc/system/local/server.conf]: Scheduling refresh of Class[Splunk::Forwarder::Service] Info: /Stage[main]/Splunk::Forwarder::Config/File[/opt/splunkforwarder/etc/system/local/server.conf]: Scheduling refresh of Class[Splunk::Forwarder::Service] Info: /Stage[main]/Splunk::Forwarder::Config/File[/opt/splunkforwarder/etc/system/local/server.conf]: Scheduling refresh of Class[Splunk::Forwarder::Service] Info: /Stage[main]/Splunk::Forwarder::Config/File[/opt/splunkforwarder/etc/system/local/server.conf]: Scheduling refresh of Class[Splunk::Forwarder::Service] Info: Class[Splunk::Forwarder::Config]: Scheduling refresh of Class[Splunk::Forwarder::Service] Info: Class[Splunk::Forwarder::Service]: Scheduling refresh of Service[SplunkForwarder] �[mNotice: /Stage[main]/Splunk::Forwarder::Service/Service[SplunkForwarder]: Triggered 'refresh' from 1 event �[mNotice: Applied catalog in 41.33 seconds

splunk::forwarder class Splunk forwarder version 7.2.4.2 works idempotently with no errors Failure/Error: apply_manifest(pp, catch_failures: true) Beaker::Host::CommandFailure: Host 'centos9-64-puppet7.example.com' exited with 6 running: puppet apply --verbose --detailed-exitcodes /tmp/apply_manifest_180406337.ZYAEvm.pp Last 10 lines of output were: Error: /Stage[main]/Splunk::Forwarder::Service/Service[SplunkForwarder]/ensure: change from 'stopped' to 'running' failed: Systemd start for SplunkForwarder failed! journalctl log for SplunkForwarder: -- No entries -- �[mNotice: /Stage[main]/Splunk::Forwarder::Service/Service[SplunkForwarder]: Triggered 'refresh' from 1 event Info: Class[Splunk::Forwarder::Service]: Unscheduling all events on Class[Splunk::Forwarder::Service] Info: Class[Splunk::Forwarder]: Unscheduling all events on Class[Splunk::Forwarder] Info: Stage[main]: Unscheduling all events on Stage[main] �[mNotice: Applied catalog in 1.20 seconds

splunk::forwarder class Splunk forwarder version 7.2.4.2 Service "SplunkForwarder" is expected to be enabled Failure/Error: it { is_expected.to be_enabled } expected Service "SplunkForwarder" to be enabled

splunk::forwarder class Splunk forwarder version 7.2.4.2 Service "SplunkForwarder" is expected to be running Failure/Error: it { is_expected.to be_running } expected Service "SplunkForwarder" to be running

splunk::forwarder class Splunk forwarder version 9.0.0 works idempotently with no errors Failure/Error: apply_manifest(pp, catch_failures: true) Beaker::Host::CommandFailure: Host 'centos9-64-puppet7.example.com' exited with 6 running: puppet apply --verbose --detailed-exitcodes /tmp/apply_manifest_180412260.ChXES0.pp Last 10 lines of output were: Error: /Stage[main]/Splunk::Forwarder::Service/Service[SplunkForwarder]/ensure: change from 'stopped' to 'running' failed: Systemd start for SplunkForwarder failed! journalctl log for SplunkForwarder: -- No entries -- �[mNotice: /Stage[main]/Splunk::Forwarder::Service/Service[SplunkForwarder]: Triggered 'refresh' from 1 event Info: Class[Splunk::Forwarder::Service]: Unscheduling all events on Class[Splunk::Forwarder::Service] Info: Class[Splunk::Forwarder]: Unscheduling all events on Class[Splunk::Forwarder] Info: Stage[main]: Unscheduling all events on Stage[main] �[mNotice: Applied catalog in 1.96 seconds

splunk::forwarder class Splunk forwarder version 9.0.0 Service "SplunkForwarder" is expected to be enabled Failure/Error: it { is_expected.to be_enabled } expected Service "SplunkForwarder" to be enabled

splunk::forwarder class Splunk forwarder version 9.0.0 Service "SplunkForwarder" is expected to be running Failure/Error: it { is_expected.to be_running } expected Service "SplunkForwarder" to be running

splunk::forwarder class default parameters works idempotently with no errors Failure/Error: apply_manifest(pp, catch_failures: true) Beaker::Host::CommandFailure: Host 'centos9-64-puppet7.example.com' exited with 6 running: puppet apply --verbose --detailed-exitcodes /tmp/apply_manifest_180419081.wcZMYh.pp Last 10 lines of output were: Oct 24 18:04:23 centos9-64-puppet7.example.com splunk[9332]: Warning: Executing "chown -R splunk:splunk /opt/splunkforwarder" Oct 24 18:04:23 centos9-64-puppet7.example.com systemd[1]: SplunkForwarder.service: Main process exited, code=exited, status=2/INVALIDARGUMENT Oct 24 18:04:23 centos9-64-puppet7.example.com systemd[1]: SplunkForwarder.service: Failed with result 'exit-code'. Oct 24 18:04:23 centos9-64-puppet7.example.com systemd[1]: Failed to start Systemd service file for Splunk, generated by 'splunk enable boot-start'. �[mNotice: /Stage[main]/Splunk::Forwarder::Service/Service[SplunkForwarder]: Triggered 'refresh' from 1 event Info: Class[Splunk::Forwarder::Service]: Unscheduling all events on Class[Splunk::Forwarder::Service] Info: Class[Splunk::Forwarder]: Unscheduling all events on Class[Splunk::Forwarder] Info: Stage[main]: Unscheduling all events on Stage[main] �[mNotice: Applied catalog in 2.13 seconds

splunk::forwarder class default parameters File "/opt/splunkforwarder/etc/system/local/outputs.conf" content is expected to match /^sslPassword = \$7\$/ Failure/Error: its(:content) { is_expected.to match %r{^sslPassword = \$7\$} } expected "[default]\ndefaultGroup=splunk_9997\n\n[tcpout:splunk_9997]\nserver=splunk:9997\n\n[tcpout:splunkcloud]\nsslPassword=super_secure_password\n" to match /^sslPassword = \$7\$/ Diff: @@ -1,8 +1,15 @@ -/^sslPassword = \$7\$/ +[default] +defaultGroup=splunk_9997 + +[tcpout:splunk_9997] +server=splunk:9997 + +[tcpout:splunkcloud] +sslPassword=super_secure_password

splunk::forwarder class default parameters Service "SplunkForwarder" is expected to be running Failure/Error: it { is_expected.to be_running } expected Service "SplunkForwarder" to be running

splunk::forwarder class purging purge_outputs => false works idempotently with no errors Failure/Error: apply_manifest(pp, catch_changes: true) Beaker::Host::CommandFailure: Host 'centos9-64-puppet7.example.com' exited with 2 running: puppet apply --verbose --detailed-exitcodes /tmp/apply_manifest_180426181.LI9twj.pp Last 10 lines of output were: Info: /Stage[main]/Splunk::Forwarder::Config/File[/opt/splunkforwarder/etc/system/local/server.conf]: Scheduling refresh of Class[Splunk::Forwarder::Service] Info: /Stage[main]/Splunk::Forwarder::Config/File[/opt/splunkforwarder/etc/system/local/server.conf]: Scheduling refresh of Class[Splunk::Forwarder::Service] Info: /Stage[main]/Splunk::Forwarder::Config/File[/opt/splunkforwarder/etc/system/local/server.conf]: Scheduling refresh of Class[Splunk::Forwarder::Service] Info: /Stage[main]/Splunk::Forwarder::Config/File[/opt/splunkforwarder/etc/system/local/server.conf]: Scheduling refresh of Class[Splunk::Forwarder::Service] Info: /Stage[main]/Splunk::Forwarder::Config/File[/opt/splunkforwarder/etc/system/local/server.conf]: Scheduling refresh of Class[Splunk::Forwarder::Service] Info: /Stage[main]/Splunk::Forwarder::Config/File[/opt/splunkforwarder/etc/system/local/server.conf]: Scheduling refresh of Class[Splunk::Forwarder::Service] Info: Class[Splunk::Forwarder::Config]: Scheduling refresh of Class[Splunk::Forwarder::Service] Info: Class[Splunk::Forwarder::Service]: Scheduling refresh of Service[SplunkForwarder] �[mNotice: /Stage[main]/Splunk::Forwarder::Service/Service[SplunkForwarder]: Triggered 'refresh' from 1 event �[mNotice: Applied catalog in 41.37 seconds

splunk::forwarder class Splunk forwarder version 7.2.4.2 works idempotently with no errors Failure/Error: apply_manifest(pp, catch_failures: true) Beaker::Host::CommandFailure: Host 'rocky9-64-puppet8.example.com' exited with 6 running: puppet apply --verbose --detailed-exitcodes /tmp/apply_manifest_180410208.WtFOuN.pp Last 10 lines of output were: Error: /Stage[main]/Splunk::Forwarder::Service/Service[SplunkForwarder]/ensure: change from 'stopped' to 'running' failed: Systemd start for SplunkForwarder failed! journalctl log for SplunkForwarder: -- No entries -- �[mNotice: /Stage[main]/Splunk::Forwarder::Service/Service[SplunkForwarder]: Triggered 'refresh' from 1 event Info: Class[Splunk::Forwarder::Service]: Unscheduling all events on Class[Splunk::Forwarder::Service] Info: Class[Splunk::Forwarder]: Unscheduling all events on Class[Splunk::Forwarder] Info: Stage[main]: Unscheduling all events on Stage[main] �[mNotice: Applied catalog in 1.09 seconds

splunk::forwarder class Splunk forwarder version 7.2.4.2 Service "SplunkForwarder" is expected to be enabled Failure/Error: it { is_expected.to be_enabled } expected Service "SplunkForwarder" to be enabled

splunk::forwarder class Splunk forwarder version 7.2.4.2 Service "SplunkForwarder" is expected to be running Failure/Error: it { is_expected.to be_running } expected Service "SplunkForwarder" to be running

splunk::forwarder class Splunk forwarder version 9.0.0 works idempotently with no errors Failure/Error: apply_manifest(pp, catch_failures: true) Beaker::Host::CommandFailure: Host 'rocky9-64-puppet8.example.com' exited with 6 running: puppet apply --verbose --detailed-exitcodes /tmp/apply_manifest_180416094.ZT62os.pp Last 10 lines of output were: Error: /Stage[main]/Splunk::Forwarder::Service/Service[SplunkForwarder]/ensure: change from 'stopped' to 'running' failed: Systemd start for SplunkForwarder failed! journalctl log for SplunkForwarder: -- No entries -- �[mNotice: /Stage[main]/Splunk::Forwarder::Service/Service[SplunkForwarder]: Triggered 'refresh' from 1 event Info: Class[Splunk::Forwarder::Service]: Unscheduling all events on Class[Splunk::Forwarder::Service] Info: Class[Splunk::Forwarder]: Unscheduling all events on Class[Splunk::Forwarder] Info: Stage[main]: Unscheduling all events on Stage[main] �[mNotice: Applied catalog in 1.62 seconds

splunk::forwarder class Splunk forwarder version 9.0.0 Service "SplunkForwarder" is expected to be enabled Failure/Error: it { is_expected.to be_enabled } expected Service "SplunkForwarder" to be enabled

splunk::forwarder class Splunk forwarder version 9.0.0 Service "SplunkForwarder" is expected to be running Failure/Error: it { is_expected.to be_running } expected Service "SplunkForwarder" to be running

splunk::forwarder class default parameters works idempotently with no errors Failure/Error: apply_manifest(pp, catch_failures: true) Beaker::Host::CommandFailure: Host 'rocky9-64-puppet8.example.com' exited with 6 running: puppet apply --verbose --detailed-exitcodes /tmp/apply_manifest_180422670.0qPdSi.pp Last 10 lines of output were: Oct 24 18:04:26 rocky9-64-puppet8.example.com splunk[10003]: Warning: Executing "chown -R splunk:splunk /opt/splunkforwarder" Oct 24 18:04:26 rocky9-64-puppet8.example.com systemd[1]: SplunkForwarder.service: Main process exited, code=exited, status=2/INVALIDARGUMENT Oct 24 18:04:26 rocky9-64-puppet8.example.com systemd[1]: SplunkForwarder.service: Failed with result 'exit-code'. Oct 24 18:04:26 rocky9-64-puppet8.example.com systemd[1]: Failed to start Systemd service file for Splunk, generated by 'splunk enable boot-start'. �[mNotice: /Stage[main]/Splunk::Forwarder::Service/Service[SplunkForwarder]: Triggered 'refresh' from 1 event Info: Class[Splunk::Forwarder::Service]: Unscheduling all events on Class[Splunk::Forwarder::Service] Info: Class[Splunk::Forwarder]: Unscheduling all events on Class[Splunk::Forwarder] Info: Stage[main]: Unscheduling all events on Stage[main] �[mNotice: Applied catalog in 1.81 seconds

splunk::forwarder class default parameters File "/opt/splunkforwarder/etc/system/local/outputs.conf" content is expected to match /^sslPassword = \$7\$/ Failure/Error: its(:content) { is_expected.to match %r{^sslPassword = \$7\$} } expected "[default]\ndefaultGroup=splunk_9997\n\n[tcpout:splunk_9997]\nserver=splunk:9997\n\n[tcpout:splunkcloud]\nsslPassword=super_secure_password\n" to match /^sslPassword = \$7\$/ Diff: @@ -1,8 +1,15 @@ -/^sslPassword = \$7\$/ +[default] +defaultGroup=splunk_9997 + +[tcpout:splunk_9997] +server=splunk:9997 + +[tcpout:splunkcloud] +sslPassword=super_secure_password

splunk::forwarder class default parameters Service "SplunkForwarder" is expected to be running Failure/Error: it { is_expected.to be_running } expected Service "SplunkForwarder" to be running

splunk::forwarder class purging purge_outputs => false works idempotently with no errors Failure/Error: apply_manifest(pp, catch_changes: true) Beaker::Host::CommandFailure: Host 'rocky9-64-puppet8.example.com' exited with 2 running: puppet apply --verbose --detailed-exitcodes /tmp/apply_manifest_180429705.c81FHA.pp Last 10 lines of output were: Info: /Stage[main]/Splunk::Forwarder::Config/File[/opt/splunkforwarder/etc/system/local/server.conf]: Scheduling refresh of Class[Splunk::Forwarder::Service] Info: /Stage[main]/Splunk::Forwarder::Config/File[/opt/splunkforwarder/etc/system/local/server.conf]: Scheduling refresh of Class[Splunk::Forwarder::Service] Info: /Stage[main]/Splunk::Forwarder::Config/File[/opt/splunkforwarder/etc/system/local/server.conf]: Scheduling refresh of Class[Splunk::Forwarder::Service] Info: /Stage[main]/Splunk::Forwarder::Config/File[/opt/splunkforwarder/etc/system/local/server.conf]: Scheduling refresh of Class[Splunk::Forwarder::Service] Info: /Stage[main]/Splunk::Forwarder::Config/File[/opt/splunkforwarder/etc/system/local/server.conf]: Scheduling refresh of Class[Splunk::Forwarder::Service] Info: /Stage[main]/Splunk::Forwarder::Config/File[/opt/splunkforwarder/etc/system/local/server.conf]: Scheduling refresh of Class[Splunk::Forwarder::Service] Info: Class[Splunk::Forwarder::Config]: Scheduling refresh of Class[Splunk::Forwarder::Service] Info: Class[Splunk::Forwarder::Service]: Scheduling refresh of Service[SplunkForwarder] �[mNotice: /Stage[main]/Splunk::Forwarder::Service/Service[SplunkForwarder]: Triggered 'refresh' from 1 event �[mNotice: Applied catalog in 41.37 seconds

splunk::forwarder class Splunk forwarder version 7.2.4.2 works idempotently with no errors Failure/Error: apply_manifest(pp, catch_failures: true) Beaker::Host::CommandFailure: Host 'ubuntu2204-64-puppet7.example.com' exited with 6 running: puppet apply --verbose --detailed-exitcodes /tmp/apply_manifest_180529965.MwV5m5.pp Last 10 lines of output were: Error: /Stage[main]/Splunk::Forwarder::Service/Service[SplunkForwarder]/ensure: change from 'stopped' to 'running' failed: Systemd start for SplunkForwarder failed! journalctl log for SplunkForwarder: -- No entries -- �[mNotice: /Stage[main]/Splunk::Forwarder::Service/Service[SplunkForwarder]: Triggered 'refresh' from 1 event Info: Class[Splunk::Forwarder::Service]: Unscheduling all events on Class[Splunk::Forwarder::Service] Info: Class[Splunk::Forwarder]: Unscheduling all events on Class[Splunk::Forwarder] Info: Stage[main]: Unscheduling all events on Stage[main] �[mNotice: Applied catalog in 3.69 seconds

splunk::forwarder class Splunk forwarder version 7.2.4.2 Service "SplunkForwarder" is expected to be enabled Failure/Error: it { is_expected.to be_enabled } expected Service "SplunkForwarder" to be enabled

splunk::forwarder class Splunk forwarder version 7.2.4.2 Service "SplunkForwarder" is expected to be running Failure/Error: it { is_expected.to be_running } expected Service "SplunkForwarder" to be running

splunk::forwarder class Splunk forwarder version 9.0.0 works idempotently with no errors Failure/Error: apply_manifest(pp, catch_failures: true) Beaker::Host::CommandFailure: Host 'ubuntu2204-64-puppet7.example.com' exited with 6 running: puppet apply --verbose --detailed-exitcodes /tmp/apply_manifest_180539926.2A4XvG.pp Last 10 lines of output were: Error: /Stage[main]/Splunk::Forwarder::Service/Service[SplunkForwarder]/ensure: change from 'stopped' to 'running' failed: Systemd start for SplunkForwarder failed! journalctl log for SplunkForwarder: -- No entries -- �[mNotice: /Stage[main]/Splunk::Forwarder::Service/Service[SplunkForwarder]: Triggered 'refresh' from 1 event Info: Class[Splunk::Forwarder::Service]: Unscheduling all events on Class[Splunk::Forwarder::Service] Info: Class[Splunk::Forwarder]: Unscheduling all events on Class[Splunk::Forwarder] Info: Stage[main]: Unscheduling all events on Stage[main] �[mNotice: Applied catalog in 3.73 seconds

splunk::forwarder class Splunk forwarder version 9.0.0 Service "SplunkForwarder" is expected to be enabled Failure/Error: it { is_expected.to be_enabled } expected Service "SplunkForwarder" to be enabled

splunk::forwarder class Splunk forwarder version 9.0.0 Service "SplunkForwarder" is expected to be running Failure/Error: it { is_expected.to be_running } expected Service "SplunkForwarder" to be running

splunk::forwarder class default parameters works idempotently with no errors Failure/Error: apply_manifest(pp, catch_changes: true) Beaker::Host::CommandFailure: Host 'ubuntu2204-64-puppet7.example.com' exited with 2 running: puppet apply --verbose --detailed-exitcodes /tmp/apply_manifest_180556094.iGVzG3.pp Last 10 lines of output were: Warning: Secrets file NOT found in /opt/splunkforwarder/etc/auth/splunk.secret Warning: Secrets file NOT found in /opt/splunkforwarder/etc/auth/splunk.secret Warning: Secrets file NOT found in /opt/splunkforwarder/etc/auth/splunk.secret Warning: Secrets file NOT found in /opt/splunkforwarder/etc/auth/splunk.secret Info: Class[Splunk::Forwarder::Config]: Scheduling refresh of Class[Splunk::Forwarder::Service] Warning: Secrets file NOT found in /opt/splunkforwarder/etc/auth/splunk.secret Info: Class[Splunk::Forwarder::Service]: Scheduling refresh of Service[SplunkForwarder] �[mNotice: /Stage[main]/Splunk::Forwarder::Service/Service[SplunkForwarder]/ensure: ensure changed 'stopped' to 'running' Info: /Stage[main]/Splunk::Forwarder::Service/Service[SplunkForwarder]: Unscheduling refresh on Service[SplunkForwarder] �[mNotice: Applied catalog in 0.22 seconds

splunk::forwarder class default parameters File "/opt/splunkforwarder/etc/system/local/outputs.conf" content is expected to match /^sslPassword = \$7\$/ Failure/Error: its(:content) { is_expected.to match %r{^sslPassword = \$7\$} } expected "[default]\ndefaultGroup=splunk_9997\n\n[tcpout:splunk_9997]\nserver=splunk:9997\n\n[tcpout:splunkcloud]\nsslPassword=super_secure_password\n" to match /^sslPassword = \$7\$/ Diff: @@ -1,8 +1,15 @@ -/^sslPassword = \$7\$/ +[default] +defaultGroup=splunk_9997 + +[tcpout:splunk_9997] +server=splunk:9997 + +[tcpout:splunkcloud] +sslPassword=super_secure_password

splunk::forwarder class purging purge_outputs => false works idempotently with no errors Failure/Error: apply_manifest(pp, catch_changes: true) Beaker::Host::CommandFailure: Host 'ubuntu2204-64-puppet7.example.com' exited with 2 running: puppet apply --verbose --detailed-exitcodes /tmp/apply_manifest_180624069.R8TAnI.pp Last 10 lines of output were: Info: /Stage[main]/Splunk::Forwarder::Config/File[/opt/splunkforwarder/etc/system/local/server.conf]: Scheduling refresh of Class[Splunk::Forwarder::Service] Info: /Stage[main]/Splunk::Forwarder::Config/File[/opt/splunkforwarder/etc/system/local/server.conf]: Scheduling refresh of Class[Splunk::Forwarder::Service] Info: /Stage[main]/Splunk::Forwarder::Config/File[/opt/splunkforwarder/etc/system/local/server.conf]: Scheduling refresh of Class[Splunk::Forwarder::Service] Info: /Stage[main]/Splunk::Forwarder::Config/File[/opt/splunkforwarder/etc/system/local/server.conf]: Scheduling refresh of Class[Splunk::Forwarder::Service] Info: /Stage[main]/Splunk::Forwarder::Config/File[/opt/splunkforwarder/etc/system/local/server.conf]: Scheduling refresh of Class[Splunk::Forwarder::Service] Info: /Stage[main]/Splunk::Forwarder::Config/File[/opt/splunkforwarder/etc/system/local/server.conf]: Scheduling refresh of Class[Splunk::Forwarder::Service] Info: Class[Splunk::Forwarder::Config]: Scheduling refresh of Class[Splunk::Forwarder::Service] Info: Class[Splunk::Forwarder::Service]: Scheduling refresh of Service[SplunkForwarder] �[mNotice: /Stage[main]/Splunk::Forwarder::Service/Service[SplunkForwarder]: Triggered 'refresh' from 1 event �[mNotice: Applied catalog in 41.36 seconds

splunk::forwarder class purging purge_outputs => true works idempotently with no errors Failure/Error: apply_manifest(pp, catch_changes: true) Beaker::Host::CommandFailure: Host 'ubuntu2204-64-puppet7.example.com' exited with 2 running: puppet apply --verbose --detailed-exitcodes /tmp/apply_manifest_180751012.xl7Cdb.pp Last 10 lines of output were: Info: /Stage[main]/Splunk::Forwarder::Config/File[/opt/splunkforwarder/etc/system/local/server.conf]: Scheduling refresh of Class[Splunk::Forwarder::Service] Info: /Stage[main]/Splunk::Forwarder::Config/File[/opt/splunkforwarder/etc/system/local/server.conf]: Scheduling refresh of Class[Splunk::Forwarder::Service] Info: /Stage[main]/Splunk::Forwarder::Config/File[/opt/splunkforwarder/etc/system/local/server.conf]: Scheduling refresh of Class[Splunk::Forwarder::Service] Info: /Stage[main]/Splunk::Forwarder::Config/File[/opt/splunkforwarder/etc/system/local/server.conf]: Scheduling refresh of Class[Splunk::Forwarder::Service] Info: /Stage[main]/Splunk::Forwarder::Config/File[/opt/splunkforwarder/etc/system/local/server.conf]: Scheduling refresh of Class[Splunk::Forwarder::Service] Info: /Stage[main]/Splunk::Forwarder::Config/File[/opt/splunkforwarder/etc/system/local/server.conf]: Scheduling refresh of Class[Splunk::Forwarder::Service] Info: Class[Splunk::Forwarder::Config]: Scheduling refresh of Class[Splunk::Forwarder::Service] Info: Class[Splunk::Forwarder::Service]: Scheduling refresh of Service[SplunkForwarder] �[mNotice: /Stage[main]/Splunk::Forwarder::Service/Service[SplunkForwarder]: Triggered 'refresh' from 1 event �[mNotice: Applied catalog in 41.20 seconds

splunk::forwarder class Splunk forwarder version 7.2.4.2 works idempotently with no errors Failure/Error: apply_manifest(pp, catch_failures: true) Beaker::Host::CommandFailure: Host 'ubuntu2204-64-puppet8.example.com' exited with 6 running: puppet apply --verbose --detailed-exitcodes /tmp/apply_manifest_180533636.UnS3wO.pp Last 10 lines of output were: Error: /Stage[main]/Splunk::Forwarder::Service/Service[SplunkForwarder]/ensure: change from 'stopped' to 'running' failed: Systemd start for SplunkForwarder failed! journalctl log for SplunkForwarder: -- No entries -- �[mNotice: /Stage[main]/Splunk::Forwarder::Service/Service[SplunkForwarder]: Triggered 'refresh' from 1 event Info: Class[Splunk::Forwarder::Service]: Unscheduling all events on Class[Splunk::Forwarder::Service] Info: Class[Splunk::Forwarder]: Unscheduling all events on Class[Splunk::Forwarder] Info: Stage[main]: Unscheduling all events on Stage[main] �[mNotice: Applied catalog in 2.87 seconds

splunk::forwarder class Splunk forwarder version 7.2.4.2 Service "SplunkForwarder" is expected to be enabled Failure/Error: it { is_expected.to be_enabled } expected Service "SplunkForwarder" to be enabled

splunk::forwarder class Splunk forwarder version 7.2.4.2 Service "SplunkForwarder" is expected to be running Failure/Error: it { is_expected.to be_running } expected Service "SplunkForwarder" to be running

splunk::forwarder class Splunk forwarder version 9.0.0 works idempotently with no errors Failure/Error: apply_manifest(pp, catch_failures: true) Beaker::Host::CommandFailure: Host 'ubuntu2204-64-puppet8.example.com' exited with 6 running: puppet apply --verbose --detailed-exitcodes /tmp/apply_manifest_180543586.oUoQBy.pp Last 10 lines of output were: Error: /Stage[main]/Splunk::Forwarder::Service/Service[SplunkForwarder]/ensure: change from 'stopped' to 'running' failed: Systemd start for SplunkForwarder failed! journalctl log for SplunkForwarder: -- No entries -- �[mNotice: /Stage[main]/Splunk::Forwarder::Service/Service[SplunkForwarder]: Triggered 'refresh' from 1 event Info: Class[Splunk::Forwarder::Service]: Unscheduling all events on Class[Splunk::Forwarder::Service] Info: Class[Splunk::Forwarder]: Unscheduling all events on Class[Splunk::Forwarder] Info: Stage[main]: Unscheduling all events on Stage[main] �[mNotice: Applied catalog in 2.91 seconds

splunk::forwarder class Splunk forwarder version 9.0.0 Service "SplunkForwarder" is expected to be enabled Failure/Error: it { is_expected.to be_enabled } expected Service "SplunkForwarder" to be enabled

splunk::forwarder class Splunk forwarder version 9.0.0 Service "SplunkForwarder" is expected to be running Failure/Error: it { is_expected.to be_running } expected Service "SplunkForwarder" to be running

splunk::forwarder class default parameters works idempotently with no errors Failure/Error: apply_manifest(pp, catch_changes: true) Beaker::Host::CommandFailure: Host 'ubuntu2204-64-puppet8.example.com' exited with 2 running: puppet apply --verbose --detailed-exitcodes /tmp/apply_manifest_180558819.LhkB8b.pp Last 10 lines of output were: Warning: Secrets file NOT found in /opt/splunkforwarder/etc/auth/splunk.secret Warning: Secrets file NOT found in /opt/splunkforwarder/etc/auth/splunk.secret Warning: Secrets file NOT found in /opt/splunkforwarder/etc/auth/splunk.secret Warning: Secrets file NOT found in /opt/splunkforwarder/etc/auth/splunk.secret Info: Class[Splunk::Forwarder::Config]: Scheduling refresh of Class[Splunk::Forwarder::Service] Warning: Secrets file NOT found in /opt/splunkforwarder/etc/auth/splunk.secret Info: Class[Splunk::Forwarder::Service]: Scheduling refresh of Service[SplunkForwarder] �[mNotice: /Stage[main]/Splunk::Forwarder::Service/Service[SplunkForwarder]/ensure: ensure changed 'stopped' to 'running' Info: /Stage[main]/Splunk::Forwarder::Service/Service[SplunkForwarder]: Unscheduling refresh on Service[SplunkForwarder] �[mNotice: Applied catalog in 0.22 seconds

splunk::forwarder class default parameters File "/opt/splunkforwarder/etc/system/local/outputs.conf" content is expected to match /^sslPassword = \$7\$/ Failure/Error: its(:content) { is_expected.to match %r{^sslPassword = \$7\$} } expected "[default]\ndefaultGroup=splunk_9997\n\n[tcpout:splunk_9997]\nserver=splunk:9997\n\n[tcpout:splunkcloud]\nsslPassword=super_secure_password\n" to match /^sslPassword = \$7\$/ Diff: @@ -1,8 +1,15 @@ -/^sslPassword = \$7\$/ +[default] +defaultGroup=splunk_9997 + +[tcpout:splunk_9997] +server=splunk:9997 + +[tcpout:splunkcloud] +sslPassword=super_secure_password

splunk::forwarder class purging purge_outputs => false works idempotently with no errors Failure/Error: apply_manifest(pp, catch_changes: true) Beaker::Host::CommandFailure: Host 'ubuntu2204-64-puppet8.example.com' exited with 2 running: puppet apply --verbose --detailed-exitcodes /tmp/apply_manifest_180628089.UuG2EN.pp Last 10 lines of output were: Info: /Stage[main]/Splunk::Forwarder::Config/File[/opt/splunkforwarder/etc/system/local/server.conf]: Scheduling refresh of Class[Splunk::Forwarder::Service] Info: /Stage[main]/Splunk::Forwarder::Config/File[/opt/splunkforwarder/etc/system/local/server.conf]: Scheduling refresh of Class[Splunk::Forwarder::Service] Info: /Stage[main]/Splunk::Forwarder::Config/File[/opt/splunkforwarder/etc/system/local/server.conf]: Scheduling refresh of Class[Splunk::Forwarder::Service] Info: /Stage[main]/Splunk::Forwarder::Config/File[/opt/splunkforwarder/etc/system/local/server.conf]: Scheduling refresh of Class[Splunk::Forwarder::Service] Info: /Stage[main]/Splunk::Forwarder::Config/File[/opt/splunkforwarder/etc/system/local/server.conf]: Scheduling refresh of Class[Splunk::Forwarder::Service] Info: /Stage[main]/Splunk::Forwarder::Config/File[/opt/splunkforwarder/etc/system/local/server.conf]: Scheduling refresh of Class[Splunk::Forwarder::Service] Info: Class[Splunk::Forwarder::Config]: Scheduling refresh of Class[Splunk::Forwarder::Service] Info: Class[Splunk::Forwarder::Service]: Scheduling refresh of Service[SplunkForwarder] �[mNotice: /Stage[main]/Splunk::Forwarder::Service/Service[SplunkForwarder]: Triggered 'refresh' from 1 event �[mNotice: Applied catalog in 41.35 seconds

splunk::forwarder class purging purge_outputs => true works idempotently with no errors Failure/Error: apply_manifest(pp, catch_changes: true) Beaker::Host::CommandFailure: Host 'ubuntu2204-64-puppet8.example.com' exited with 2 running: puppet apply --verbose --detailed-exitcodes /tmp/apply_manifest_180755614.Uxe910.pp Last 10 lines of output were: Info: /Stage[main]/Splunk::Forwarder::Config/File[/opt/splunkforwarder/etc/system/local/server.conf]: Scheduling refresh of Class[Splunk::Forwarder::Service] Info: /Stage[main]/Splunk::Forwarder::Config/File[/opt/splunkforwarder/etc/system/local/server.conf]: Scheduling refresh of Class[Splunk::Forwarder::Service] Info: /Stage[main]/Splunk::Forwarder::Config/File[/opt/splunkforwarder/etc/system/local/server.conf]: Scheduling refresh of Class[Splunk::Forwarder::Service] Info: /Stage[main]/Splunk::Forwarder::Config/File[/opt/splunkforwarder/etc/system/local/server.conf]: Scheduling refresh of Class[Splunk::Forwarder::Service] Info: /Stage[main]/Splunk::Forwarder::Config/File[/opt/splunkforwarder/etc/system/local/server.conf]: Scheduling refresh of Class[Splunk::Forwarder::Service] Info: /Stage[main]/Splunk::Forwarder::Config/File[/opt/splunkforwarder/etc/system/local/server.conf]: Scheduling refresh of Class[Splunk::Forwarder::Service] Info: Class[Splunk::Forwarder::Config]: Scheduling refresh of Class[Splunk::Forwarder::Service] Info: Class[Splunk::Forwarder::Service]: Scheduling refresh of Service[SplunkForwarder] �[mNotice: /Stage[main]/Splunk::Forwarder::Service/Service[SplunkForwarder]: Triggered 'refresh' from 1 event �[mNotice: Applied catalog in 41.28 seconds

splunk::forwarder class Splunk forwarder version 7.2.4.2 works idempotently with no errors Failure/Error: apply_manifest(pp, catch_failures: true) Beaker::Host::CommandFailure: Host 'ubuntu2004-64-puppet7.example.com' exited with 6 running: puppet apply --verbose --detailed-exitcodes /tmp/apply_manifest_180547347.wv1POB.pp Last 10 lines of output were: Error: /Stage[main]/Splunk::Forwarder::Service/Service[SplunkForwarder]/ensure: change from 'stopped' to 'running' failed: Systemd start for SplunkForwarder failed! journalctl log for SplunkForwarder: -- Logs begin at Thu 2024-10-24 17:57:13 UTC, end at Thu 2024-10-24 18:05:52 UTC. -- -- No entries -- �[mNotice: /Stage[main]/Splunk::Forwarder::Service/Service[SplunkForwarder]: Triggered 'refresh' from 1 event Info: Class[Splunk::Forwarder::Service]: Unscheduling all events on Class[Splunk::Forwarder::Service] Info: Class[Splunk::Forwarder]: Unscheduling all events on Class[Splunk::Forwarder] Info: Stage[main]: Unscheduling all events on Stage[main] �[mNotice: Applied catalog in 2.92 seconds

splunk::forwarder class Splunk forwarder version 7.2.4.2 Service "SplunkForwarder" is expected to be enabled Failure/Error: it { is_expected.to be_enabled } expected Service "SplunkForwarder" to be enabled

splunk::forwarder class Splunk forwarder version 7.2.4.2 Service "SplunkForwarder" is expected to be running Failure/Error: it { is_expected.to be_running } expected Service "SplunkForwarder" to be running

splunk::forwarder class Splunk forwarder version 9.0.0 works idempotently with no errors Failure/Error: apply_manifest(pp, catch_failures: true) Beaker::Host::CommandFailure: Host 'ubuntu2004-64-puppet7.example.com' exited with 6 running: puppet apply --verbose --detailed-exitcodes /tmp/apply_manifest_180556869.unFOMb.pp Last 10 lines of output were: Error: /Stage[main]/Splunk::Forwarder::Service/Service[SplunkForwarder]/ensure: change from 'stopped' to 'running' failed: Systemd start for SplunkForwarder failed! journalctl log for SplunkForwarder: -- Logs begin at Thu 2024-10-24 17:57:13 UTC, end at Thu 2024-10-24 18:06:01 UTC. -- -- No entries -- �[mNotice: /Stage[main]/Splunk::Forwarder::Service/Service[SplunkForwarder]: Triggered 'refresh' from 1 event Info: Class[Splunk::Forwarder::Service]: Unscheduling all events on Class[Splunk::Forwarder::Service] Info: Class[Splunk::Forwarder]: Unscheduling all events on Class[Splunk::Forwarder] Info: Stage[main]: Unscheduling all events on Stage[main] �[mNotice: Applied catalog in 2.97 seconds

splunk::forwarder class Splunk forwarder version 9.0.0 Service "SplunkForwarder" is expected to be enabled Failure/Error: it { is_expected.to be_enabled } expected Service "SplunkForwarder" to be enabled

splunk::forwarder class Splunk forwarder version 9.0.0 Service "SplunkForwarder" is expected to be running Failure/Error: it { is_expected.to be_running } expected Service "SplunkForwarder" to be running

splunk::forwarder class default parameters works idempotently with no errors Failure/Error: apply_manifest(pp, catch_changes: true) Beaker::Host::CommandFailure: Host 'ubuntu2004-64-puppet7.example.com' exited with 2 running: puppet apply --verbose --detailed-exitcodes /tmp/apply_manifest_180611499.iMx3cX.pp Last 10 lines of output were: Warning: Secrets file NOT found in /opt/splunkforwarder/etc/auth/splunk.secret Warning: Secrets file NOT found in /opt/splunkforwarder/etc/auth/splunk.secret Warning: Secrets file NOT found in /opt/splunkforwarder/etc/auth/splunk.secret Warning: Secrets file NOT found in /opt/splunkforwarder/etc/auth/splunk.secret Info: Class[Splunk::Forwarder::Config]: Scheduling refresh of Class[Splunk::Forwarder::Service] Warning: Secrets file NOT found in /opt/splunkforwarder/etc/auth/splunk.secret Info: Class[Splunk::Forwarder::Service]: Scheduling refresh of Service[SplunkForwarder] �[mNotice: /Stage[main]/Splunk::Forwarder::Service/Service[SplunkForwarder]/ensure: ensure changed 'stopped' to 'running' Info: /Stage[main]/Splunk::Forwarder::Service/Service[SplunkForwarder]: Unscheduling refresh on Service[SplunkForwarder] �[mNotice: Applied catalog in 0.22 seconds

splunk::forwarder class default parameters File "/opt/splunkforwarder/etc/system/local/outputs.conf" content is expected to match /^sslPassword = \$7\$/ Failure/Error: its(:content) { is_expected.to match %r{^sslPassword = \$7\$} } expected "[default]\ndefaultGroup=splunk_9997\n\n[tcpout:splunk_9997]\nserver=splunk:9997\n\n[tcpout:splunkcloud]\nsslPassword=super_secure_password\n" to match /^sslPassword = \$7\$/ Diff: @@ -1,8 +1,15 @@ -/^sslPassword = \$7\$/ +[default] +defaultGroup=splunk_9997 + +[tcpout:splunk_9997] +server=splunk:9997 + +[tcpout:splunkcloud] +sslPassword=super_secure_password

splunk::forwarder class purging purge_outputs => false works idempotently with no errors Failure/Error: apply_manifest(pp, catch_changes: true) Beaker::Host::CommandFailure: Host 'ubuntu2004-64-puppet7.example.com' exited with 2 running: puppet apply --verbose --detailed-exitcodes /tmp/apply_manifest_180640432.8cfR98.pp Last 10 lines of output were: Info: /Stage[main]/Splunk::Forwarder::Config/File[/opt/splunkforwarder/etc/system/local/server.conf]: Scheduling refresh of Class[Splunk::Forwarder::Service] Info: /Stage[main]/Splunk::Forwarder::Config/File[/opt/splunkforwarder/etc/system/local/server.conf]: Scheduling refresh of Class[Splunk::Forwarder::Service] Info: /Stage[main]/Splunk::Forwarder::Config/File[/opt/splunkforwarder/etc/system/local/server.conf]: Scheduling refresh of Class[Splunk::Forwarder::Service] Info: /Stage[main]/Splunk::Forwarder::Config/File[/opt/splunkforwarder/etc/system/local/server.conf]: Scheduling refresh of Class[Splunk::Forwarder::Service] Info: /Stage[main]/Splunk::Forwarder::Config/File[/opt/splunkforwarder/etc/system/local/server.conf]: Scheduling refresh of Class[Splunk::Forwarder::Service] Info: /Stage[main]/Splunk::Forwarder::Config/File[/opt/splunkforwarder/etc/system/local/server.conf]: Scheduling refresh of Class[Splunk::Forwarder::Service] Info: Class[Splunk::Forwarder::Config]: Scheduling refresh of Class[Splunk::Forwarder::Service] Info: Class[Splunk::Forwarder::Service]: Scheduling refresh of Service[SplunkForwarder] �[mNotice: /Stage[main]/Splunk::Forwarder::Service/Service[SplunkForwarder]: Triggered 'refresh' from 1 event �[mNotice: Applied catalog in 41.28 seconds

splunk::forwarder class purging purge_outputs => true works idempotently with no errors Failure/Error: apply_manifest(pp, catch_changes: true) Beaker::Host::CommandFailure: Host 'ubuntu2004-64-puppet7.example.com' exited with 2 running: puppet apply --verbose --detailed-exitcodes /tmp/apply_manifest_180807594.t3MVt4.pp Last 10 lines of output were: Info: /Stage[main]/Splunk::Forwarder::Config/File[/opt/splunkforwarder/etc/system/local/server.conf]: Scheduling refresh of Class[Splunk::Forwarder::Service] Info: /Stage[main]/Splunk::Forwarder::Config/File[/opt/splunkforwarder/etc/system/local/server.conf]: Scheduling refresh of Class[Splunk::Forwarder::Service] Info: /Stage[main]/Splunk::Forwarder::Config/File[/opt/splunkforwarder/etc/system/local/server.conf]: Scheduling refresh of Class[Splunk::Forwarder::Service] Info: /Stage[main]/Splunk::Forwarder::Config/File[/opt/splunkforwarder/etc/system/local/server.conf]: Scheduling refresh of Class[Splunk::Forwarder::Service] Info: /Stage[main]/Splunk::Forwarder::Config/File[/opt/splunkforwarder/etc/system/local/server.conf]: Scheduling refresh of Class[Splunk::Forwarder::Service] Info: /Stage[main]/Splunk::Forwarder::Config/File[/opt/splunkforwarder/etc/system/local/server.conf]: Scheduling refresh of Class[Splunk::Forwarder::Service] Info: Class[Splunk::Forwarder::Config]: Scheduling refresh of Class[Splunk::Forwarder::Service] Info: Class[Splunk::Forwarder::Service]: Scheduling refresh of Service[SplunkForwarder] �[mNotice: /Stage[main]/Splunk::Forwarder::Service/Service[SplunkForwarder]: Triggered 'refresh' from 1 event �[mNotice: Applied catalog in 41.23 seconds

splunk::forwarder class Splunk forwarder version 7.2.4.2 works idempotently with no errors Failure/Error: apply_manifest(pp, catch_failures: true) Beaker::Host::CommandFailure: Host 'ubuntu2004-64-puppet8.example.com' exited with 6 running: puppet apply --verbose --detailed-exitcodes /tmp/apply_manifest_180612522.xZavg8.pp Last 10 lines of output were: Error: /Stage[main]/Splunk::Forwarder::Service/Service[SplunkForwarder]/ensure: change from 'stopped' to 'running' failed: Systemd start for SplunkForwarder failed! journalctl log for SplunkForwarder: -- Logs begin at Thu 2024-10-24 17:57:04 UTC, end at Thu 2024-10-24 18:06:18 UTC. -- -- No entries -- �[mNotice: /Stage[main]/Splunk::Forwarder::Service/Service[SplunkForwarder]: Triggered 'refresh' from 1 event Info: Class[Splunk::Forwarder::Service]: Unscheduling all events on Class[Splunk::Forwarder::Service] Info: Class[Splunk::Forwarder]: Unscheduling all events on Class[Splunk::Forwarder] Info: Stage[main]: Unscheduling all events on Stage[main] �[mNotice: Applied catalog in 3.74 seconds

splunk::forwarder class Splunk forwarder version 7.2.4.2 Service "SplunkForwarder" is expected to be enabled Failure/Error: it { is_expected.to be_enabled } expected Service "SplunkForwarder" to be enabled

splunk::forwarder class Splunk forwarder version 7.2.4.2 Service "SplunkForwarder" is expected to be running Failure/Error: it { is_expected.to be_running } expected Service "SplunkForwarder" to be running

splunk::forwarder class Splunk forwarder version 9.0.0 works idempotently with no errors Failure/Error: apply_manifest(pp, catch_failures: true) Beaker::Host::CommandFailure: Host 'ubuntu2004-64-puppet8.example.com' exited with 6 running: puppet apply --verbose --detailed-exitcodes /tmp/apply_manifest_180623642.e61A9f.pp Last 10 lines of output were: Error: /Stage[main]/Splunk::Forwarder::Service/Service[SplunkForwarder]/ensure: change from 'stopped' to 'running' failed: Systemd start for SplunkForwarder failed! journalctl log for SplunkForwarder: -- Logs begin at Thu 2024-10-24 17:57:04 UTC, end at Thu 2024-10-24 18:06:29 UTC. -- -- No entries -- �[mNotice: /Stage[main]/Splunk::Forwarder::Service/Service[SplunkForwarder]: Triggered 'refresh' from 1 event Info: Class[Splunk::Forwarder::Service]: Unscheduling all events on Class[Splunk::Forwarder::Service] Info: Class[Splunk::Forwarder]: Unscheduling all events on Class[Splunk::Forwarder] Info: Stage[main]: Unscheduling all events on Stage[main] �[mNotice: Applied catalog in 3.85 seconds

splunk::forwarder class Splunk forwarder version 9.0.0 Service "SplunkForwarder" is expected to be enabled Failure/Error: it { is_expected.to be_enabled } expected Service "SplunkForwarder" to be enabled

splunk::forwarder class Splunk forwarder version 9.0.0 Service "SplunkForwarder" is expected to be running Failure/Error: it { is_expected.to be_running } expected Service "SplunkForwarder" to be running

splunk::forwarder class default parameters works idempotently with no errors Failure/Error: apply_manifest(pp, catch_changes: true) Beaker::Host::CommandFailure: Host 'ubuntu2004-64-puppet8.example.com' exited with 2 running: puppet apply --verbose --detailed-exitcodes /tmp/apply_manifest_180641551.NCgr98.pp Last 10 lines of output were: Warning: Secrets file NOT found in /opt/splunkforwarder/etc/auth/splunk.secret Warning: Secrets file NOT found in /opt/splunkforwarder/etc/auth/splunk.secret Warning: Secrets file NOT found in /opt/splunkforwarder/etc/auth/splunk.secret Warning: Secrets file NOT found in /opt/splunkforwarder/etc/auth/splunk.secret Info: Class[Splunk::Forwarder::Config]: Scheduling refresh of Class[Splunk::Forwarder::Service] Warning: Secrets file NOT found in /opt/splunkforwarder/etc/auth/splunk.secret Info: Class[Splunk::Forwarder::Service]: Scheduling refresh of Service[SplunkForwarder] �[mNotice: /Stage[main]/Splunk::Forwarder::Service/Service[SplunkForwarder]/ensure: ensure changed 'stopped' to 'running' Info: /Stage[main]/Splunk::Forwarder::Service/Service[SplunkForwarder]: Unscheduling refresh on Service[SplunkForwarder] �[mNotice: Applied catalog in 0.27 seconds

splunk::forwarder class default parameters File "/opt/splunkforwarder/etc/system/local/outputs.conf" content is expected to match /^sslPassword = \$7\$/ Failure/Error: its(:content) { is_expected.to match %r{^sslPassword = \$7\$} } expected "[default]\ndefaultGroup=splunk_9997\n\n[tcpout:splunk_9997]\nserver=splunk:9997\n\n[tcpout:splunkcloud]\nsslPassword=super_secure_password\n" to match /^sslPassword = \$7\$/ Diff: @@ -1,8 +1,15 @@ -/^sslPassword = \$7\$/ +[default] +defaultGroup=splunk_9997 + +[tcpout:splunk_9997] +server=splunk:9997 + +[tcpout:splunkcloud] +sslPassword=super_secure_password

splunk::forwarder class purging purge_outputs => false works idempotently with no errors Failure/Error: apply_manifest(pp, catch_changes: true) Beaker::Host::CommandFailure: Host 'ubuntu2004-64-puppet8.example.com' exited with 2 running: puppet apply --verbose --detailed-exitcodes /tmp/apply_manifest_180728404.rQxY7F.pp Last 10 lines of output were: Info: /Stage[main]/Splunk::Forwarder::Config/File[/opt/splunkforwarder/etc/system/local/server.conf]: Scheduling refresh of Class[Splunk::Forwarder::Service] Info: /Stage[main]/Splunk::Forwarder::Config/File[/opt/splunkforwarder/etc/system/local/server.conf]: Scheduling refresh of Class[Splunk::Forwarder::Service] Info: /Stage[main]/Splunk::Forwarder::Config/File[/opt/splunkforwarder/etc/system/local/server.conf]: Scheduling refresh of Class[Splunk::Forwarder::Service] Info: /Stage[main]/Splunk::Forwarder::Config/File[/opt/splunkforwarder/etc/system/local/server.conf]: Scheduling refresh of Class[Splunk::Forwarder::Service] Info: /Stage[main]/Splunk::Forwarder::Config/File[/opt/splunkforwarder/etc/system/local/server.conf]: Scheduling refresh of Class[Splunk::Forwarder::Service] Info: /Stage[main]/Splunk::Forwarder::Config/File[/opt/splunkforwarder/etc/system/local/server.conf]: Scheduling refresh of Class[Splunk::Forwarder::Service] Info: Class[Splunk::Forwarder::Config]: Scheduling refresh of Class[Splunk::Forwarder::Service] Info: Class[Splunk::Forwarder::Service]: Scheduling refresh of Service[SplunkForwarder] �[mNotice: /Stage[main]/Splunk::Forwarder::Service/Service[SplunkForwarder]: Triggered 'refresh' from 1 event �[mNotice: Applied catalog in 41.21 seconds

splunk::forwarder class purging purge_outputs => true works idempotently with no errors Failure/Error: apply_manifest(pp, catch_changes: true) Beaker::Host::CommandFailure: Host 'ubuntu2004-64-puppet8.example.com' exited with 2 running: puppet apply --verbose --detailed-exitcodes /tmp/apply_manifest_180856121.26mGic.pp Last 10 lines of output were: Info: /Stage[main]/Splunk::Forwarder::Config/File[/opt/splunkforwarder/etc/system/local/server.conf]: Scheduling refresh of Class[Splunk::Forwarder::Service] Info: /Stage[main]/Splunk::Forwarder::Config/File[/opt/splunkforwarder/etc/system/local/server.conf]: Scheduling refresh of Class[Splunk::Forwarder::Service] Info: /Stage[main]/Splunk::Forwarder::Config/File[/opt/splunkforwarder/etc/system/local/server.conf]: Scheduling refresh of Class[Splunk::Forwarder::Service] Info: /Stage[main]/Splunk::Forwarder::Config/File[/opt/splunkforwarder/etc/system/local/server.conf]: Scheduling refresh of Class[Splunk::Forwarder::Service] Info: /Stage[main]/Splunk::Forwarder::Config/File[/opt/splunkforwarder/etc/system/local/server.conf]: Scheduling refresh of Class[Splunk::Forwarder::Service] Info: /Stage[main]/Splunk::Forwarder::Config/File[/opt/splunkforwarder/etc/system/local/server.conf]: Scheduling refresh of Class[Splunk::Forwarder::Service] Info: Class[Splunk::Forwarder::Config]: Scheduling refresh of Class[Splunk::Forwarder::Service] Info: Class[Splunk::Forwarder::Service]: Scheduling refresh of Service[SplunkForwarder] �[mNotice: /Stage[main]/Splunk::Forwarder::Service/Service[SplunkForwarder]: Triggered 'refresh' from 1 event �[mNotice: Applied catalog in 24.03 seconds

Process completed with exit code 1.

Skipping EOL operating system RedHat 7

Skipping EOL operating system CentOS 7

Skipping EOL operating system CentOS 8

Skipping EOL operating system Debian 10