Splunk

default.yml

---
ansible_connection: local
ansible_environment: {}
ansible_post_tasks: null
ansible_pre_tasks: null
cert_prefix: https
config:
  baked: default.yml
  defaults_dir: /tmp/defaults
  env:
    headers: null
    var: SPLUNK_DEFAULTS_URL
    verify: true
  host:
    headers: null
    url: null
    verify: true
  max_delay: 60
  max_retries: 3
  max_timeout: 1200
dmc_asset_interval: 3,18,33,48 * * * *
dmc_forwarder_monitoring: false
docker: true
es_ssl_enablement: --ssl_enablement auto
hide_password: false
java_download_url: null
java_update_version: null
java_version: null
retry_delay: 6
retry_num: 60
shc_sync_retry_num: 60
splunk:
  admin_user: admin
  allow_upgrade: true
  app_paths:
    default: /opt/splunk/etc/apps
    deployment: /opt/splunk/etc/deployment-apps
    httpinput: /opt/splunk/etc/apps/splunk_httpinput
    idxc: /opt/splunk/etc/master-apps
    shc: /opt/splunk/etc/shcluster/apps
  appserver:
    port: 8065
  asan: false
  auxiliary_cluster_masters: []
  build_url_bearer_token: null
  cluster_master_url: null
  connection_timeout: 0
  deployer_url: null
  dfs:
    dfc_num_slots: 4
    dfw_num_slots: 10
    dfw_num_slots_enabled: false
    enable: false
    port: 9000
    spark_master_host: 127.0.0.1
    spark_master_webui_port: 8080
  dsp:
    cert: null
    enable: false
    pipeline_desc: null
    pipeline_name: null
    pipeline_spec: null
    server: forwarders.scp.splunk.com:9997
    verify: false
  enable_service: true
  es:
    ssl_enablement: auto
  exec: /opt/splunk/bin/splunk
  group: splunk
  hec:
    cert: null
    enable: true
    password: null
    port: 8088
    ssl: true
    token: e1175fb4-bfe0-4224-9aab-68d11363ace7
  home: /opt/splunk
  http_enableSSL: false
  http_enableSSL_cert: null
  http_enableSSL_privKey: null
  http_enableSSL_privKey_password: null
  http_port: 8000
  idxc:
    discoveryPass4SymmKey: FdKCBlgDbrqEdulIosdqyVZCqvxSo9DU
    label: idxc_label
    pass4SymmKey: FdKCBlgDbrqEdulIosdqyVZCqvxSo9DU
    replication_factor: 3
    replication_port: 9887
    search_factor: 3
    secret: FdKCBlgDbrqEdulIosdqyVZCqvxSo9DU
  ignore_license: false
  kvstore:
    port: 8191
  launch: {}
  license_download_dest: /tmp/splunk.lic
  license_master_url: ''
  multisite_master_port: 8089
  multisite_replication_factor_origin: 2
  multisite_replication_factor_total: 3
  multisite_search_factor_origin: 1
  multisite_search_factor_total: 3
  opt: /opt
  pass4SymmKey: null
  password: splunkisawesome2020
  pid: /opt/splunk/var/run/splunk/splunkd.pid
  root_endpoint: null
  s2s:
    ca: null
    cert: null
    enable: true
    password: null
    port: 9997
    ssl: false
  search_head_captain_url: null
  secret: null
  service_name: null
  set_search_peers: true
  shc:
    deployer_push_mode: null
    label: shc_label
    pass4SymmKey: N8+uVsS7b8tTdD380RaQOi9frmJuFr6a
    replication_factor: 3
    replication_port: 9887
    secret: N8+uVsS7b8tTdD380RaQOi9frmJuFr6a
  smartstore: null
  ssl:
    ca: null
    cert: null
    enable: true
    password: null
  svc_port: 8089
  tar_dir: splunk
  user: splunk
  wildcard_license: false
splunk_home_ownership_enforcement: true
splunkbase_password: null
splunkbase_token: null
splunkbase_username: null
wait_for_splunk_retry_num: 60

docksal.env

DOCKSAL_STACK=default
DOCROOT=docroot
MYSQL_PORT_MAPPING='0:3306'
MY_APP=./splunk/my_app
DEFAULT_YML=./splunk/default.yml
MY_DATA=./splunk/data

docksal.yml

version: "2.1"

services:
  so1:
    image: ${SPLUNK_IMAGE:-splunk/splunk:latest}
    volumes:
      - ${MY_APP:-./my_app}:/opt/splunk/etc/apps/dev
      - ${DEFAULT_YML:-./default.yml}:/tmp/default.yml
      - ${MY_DATA:-./data}:/tmp/data
    environment:
      - SPLUNK_START_ARGS=--accept-license
      - SPLUNK_PASSWORD=${SPLUNK_PASSWORD:-splunk123}
      - SPLUNK_HEC_TOKEN=${SPLUNK_HEC_TOKEN:-abcd1234}
    ports:
      - 8000:8000
      - 8089:8089
      - 8088:8088
      - 1514:1514
      - 9997:9997
    dns:
      - ${DOCKSAL_DNS1}
      - ${DOCKSAL_DNS2}
    labels:
      - io.docksal.virtual-host=splunk.${VIRTUAL_HOST}
      - io.docksal.virtual-port=8000