-
Notifications
You must be signed in to change notification settings - Fork 0
/
idx_ack_playbook.yml
47 lines (43 loc) · 1.57 KB
/
idx_ack_playbook.yml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
---
- hosts: orca_role_indexer
gather_facts: false
vars:
splunk:
user: splunk
home: /opt/splunk
exec: /opt/splunk/bin/splunk
tasks:
#First steps, we aren't guaranteed to have an etc/system/local directory, so we should create it
- name: Create etc/apps/splunk_httpinput/local directory
file: path={{splunk.home}}/etc/apps/splunk_httpinput/local state=directory mode=0755 recurse=yes owner={{splunk.user}}
become: yes
become_user: "{{splunk.user}}"
#The next step is to create the conf file we want to use, if it doesn't exist
- name: Check for inputs.conf
stat: path={{splunk.home}}/etc/apps/splunk_httpinput/local/inputs.conf
#NOTE: Change the variable this registers as for multiple conf files
register: conf_file
changed_when: False
become: yes
become_user: "{{splunk.user}}"
- name: Create server.conf
file: path={{splunk.home}}/etc/system/local/server.conf state=touch mode=0644 owner={{splunk.user}}
when: conf_file.stat.exists == False
become: yes
become_user: "{{splunk.user}}"
#Last step, we take our conf file and we add the parameter that we need
- name: Add the conf file parameter
ini_file: >
dest={{splunk.home}}/etc/apps/splunk_httpinput/local/inputs.conf
section=http://orca
option=useACK
value=1
become: yes
become_user: "{{splunk.user}}"
- name: Restart the splunkd service
command: "{{splunk.exec}} restart -f"
become: yes
become_user: "{{splunk.user}}"
environment:
HOME: "{{splunk.home}}"
ignore_errors: true