syncfunction / splunk-ansible

Ansible playbooks for configuring and managing Splunk Enterprise and Universal Forwarder deployments

splunk-ansible: Provisioning Splunk Enterprise the Easy Way

Welcome to Splunk's official repository containing Ansible playbooks for configuring and managing Splunk Enterprise and Universal Forwarder deployments. This repository contains plays that target all Splunk Enterprise roles and deployment topologies that work on any Linux-based platform. It is currently being used by Splunk's official Docker image project.

Visit the splunk-ansible documentation page for full usage instructions, including installation, tutorials, and examples.

See the Ansible documentation for more details about Ansible concepts and how it works.

---

Table of Contents

1. Purpose
2. Support
3. Contributing
4. License

---

Purpose

What is Splunk Enterprise?

Splunk Enterprise is a platform for operational intelligence. Splunk software lets you collect, analyze, and act upon the untapped value of big data that your technology infrastructure, security systems, and business applications generate. It gives you insights to drive operational performance and business results.

See Splunk products for more information about the features and capabilities of Splunk products and how you can bring it into your organization.

What is splunk-ansible?

Use the code in this repository to configure Splunk Enterprise and Splunk Universal Forwarder instances based on a declarative configuration. You can use Ansible to manage Splunk Enterprise and Splunk Universal Forwarder in a manner consistent with industry standards such as infrastructure automation and infrastructure-as-code.

The playbooks in this codebase are Splunk-vetted procedures and operations that administer and manage Splunk products as done within the company.

Support

Please use the GitHub issue tracker to submit bugs or request features.

If you have questions or need support, you can:

• Post a question to Splunk Answers
• Join the #docker room in the Splunk Slack channel
• If you are a Splunk Enterprise customer with a support entitlement contract and have a question related to a Splunk product, you can open a support case on the Splunk support portal.

Contributing

We welcome feedback and contributions from the community! See the contribution guidelines for more information on how to get involved.

License

Copyright 2018-2020 Splunk.

Distributed under the terms of our license, splunk-ansible is a free and open-source software.