Nemesi

Author: bpelaia

environments/nemesi/group_vars/all.yml

@@ -0,0 +1,23 @@
+---
+#splunk_uri_lm: https://my_license_master:8089
+#splunk_package_url_full: http://127.0.0.1:2280/{{ splunk_package_version }}/linux/splunk-{{ splunk_package_version }}-{{ build_id }}-Linux-x86_64.tgz
+splunk_package_url_full: http://127.0.0.1:2280/splunk-{{ splunk_package_version }}-{{ build_id }}-Linux-x86_64.tgz
+splunk_download_local: true
+splunk_license_file: Splunk.License
+splunk_license_group: Enterprise
+#splunk_uri_ds: lm1:8089
+splunk_uri_lm: https://lm1:8089
+splunk_admin_username: admin
+splunk_admin_password: changed.
+splunk_use_systemd: false
+splunk_idxc_key: Nemesi4.idxc.PosteItaliane.2022
+splunk_idxc_label: nemesi4idxc
+splunk_shc_key: Nemesi4.shc.PosteItaliane.2022
+splunk_shc_label: nemesi4shc
+ansible_user: gandalf
+ansible_password: gandalf
+#ansible_ssh_private_key_file: ~/.ssh/my_ansible_ssh.key
+#git_server: ssh://git@mygithost:1234
+#git_key: ~/.ssh/my-git-key
+#git_project: SOMEPROJECT
+desired_start_method: none

environments/nemesi/group_vars/clustermanager.yml

@@ -0,0 +1,7 @@
+---
+# group vars for cluster manager
+splunk_app_deploy_path: etc/master-apps # default subdirectory in splunk_home that apps from git should be installed to, overridable in git_apps if you want to install to etc/apps
+#git_version: 1.0.0
+#git_apps:
+#    - name: my_outputs
+#    - name: Splunk_TA_nix

environments/nemesi/group_vars/deploymentserver.yml

@@ -0,0 +1,13 @@
+---
+# group_vars for deployment server
+#splunk_app_deploy_path: etc/deployment-apps
+#git_version: master
+#git_apps:
+#    # Example of cloning a repository from a different git server and then deploying it to a path other than etc/deployment-apps
+#    - name: my_outputs
+#      git_version: 1.0.0
+#      git_server: ssh://git@anotherserver.com
+#      git_key: ~/.ssh/anotherkey
+#      git_project: SPLK
+#      splunk_app_deploy_path: etc/apps
+#    - name: disable_rest

environments/nemesi/group_vars/heavyforwarder.yml

@@ -0,0 +1,6 @@
+---
+splunk_firewall_ports:
+  - "{{ splunkweb_port }}"
+  - "{{ splunkapi_port }}"
+  - "{{ splunktcpin_port }}"
+  - "{{ splunkhec_port }}"

environments/nemesi/group_vars/indexer.yml

@@ -0,0 +1,7 @@
+---
+splunk_firewall_ports:
+  - "{{ splunkweb_port }}"
+  - "{{ splunkapi_port }}"
+  - "{{ splunktcpin_port }}"
+  - "{{ splunkhec_port }}"
+  - "{{ splunkidxcrep_port }}"

environments/nemesi/group_vars/search.yml

@@ -0,0 +1,5 @@
+---
+splunk_firewall_ports:
+  - "{{ splunkweb_port }}"
+  - "{{ splunkapi_port }}"
+  - "{{ splunkshcrep_port }}"

environments/nemesi/group_vars/universalforwarder.yml

@@ -0,0 +1,6 @@
+---
+# group_vars for universal forwarders
+splunk_uri_ds: lm1:8089
+splunk_app_deploy_path: etc/apps # subdirectory in splunk_home that apps from git should be installed to by Ansible
+#git_apps:
+#    - name: config_base

environments/nemesi/host_vars/my-ds.yml

@@ -0,0 +1,50 @@
+---
+# Example host_vars for a deployment server that is leveraging the configure_serverclass.yml task to manage serverclass.conf
+serverclasses:
+# First server class example, basic definition:
+  - serverclass: ALL
+    whitelist:
+      - '*'
+    apps:
+      - name: my_outputs_addon
+        options:
+          restartSplunkd: 1
+# Second server class example, adding in the platform filter:
+  - serverclass: ALL_NIX
+    whitelist:
+      - '*'
+    platform: linux-x86_64
+    apps:
+      - name: Splunk_TA_nix
+        options:
+          restartSplunkd: 1
+# Third server class example, adding multiple apps and filters with additional options configured for each app:
+  - serverclass: ALL_WINDOWS_x64
+    whitelist:
+      - 'hosta'
+      - 'hostb'
+      - 'windows-dc-*'
+    blacklist:
+      - 'hostc'
+    platform: windows-x64
+    apps:
+      - name: Splunk_TA_windows
+        options:
+          restartSplunkd: 0
+          restartIfNeeded: 1
+      - name: custom_windows_inputs
+        options:
+          restartSplunkWeb: 0
+          restartSplunkd: 1
+          stateOnClient: enabled
+
+# Fourth server class example, setting the restartSplunkd on the serverclass level:
+  - serverclass: ALL_WEB
+    restartSplunkd: 1
+    whitelist:
+      - 'webserver1'
+      - 'webserver2'
+    blacklist:
+      - 'webserver*dev'
+    apps:
+      - name: webserver_app

environments/nemesi/host_vars/my-shc-deployer.yml

@@ -0,0 +1,5 @@
+---
+deploy_target: my-shc-target-sh-uri
+#git_version: 1.0.0 # This is the golden repo branch for this host! It retires all ID/ED/SB/CM projects and repos
+#git_apps:
+#    - name: myapp

environments/nemesi/inventory.yml

@@ -0,0 +1,91 @@
+---
+# YAML format inventory with nested groups for variable inheritance
+# Mason Morales, Splunk, Inc.
+# References:
+# https://docs.ansible.com/ansible/latest/user_guide/intro_inventory.html
+# Read this: https://docs.ansible.com/ansible/2.9/plugins/inventory/yaml.html
+# https://www.digitalocean.com/community/tutorials/how-to-manage-multistage-environments-with-ansible
+# ##########################################################################
+all:
+  children:
+    tutti:
+      hosts:
+        sh1:
+          ansible_port: 2222
+          ansible_host: 127.0.0.1
+        sh2:
+          ansible_port: 2228
+          ansible_host: 127.0.0.1
+        sh3:
+          ansible_port: 2229
+          ansible_host: 127.0.0.1
+        lm1:
+          ansible_port: 2227
+          ansible_host: 127.0.0.1
+        cm1:
+          ansible_port: 2223
+          ansible_host: 127.0.0.1
+        idx1:
+          ansible_port: 2224
+          ansible_host: 127.0.0.1
+        idx2:
+          ansible_port: 2225
+          ansible_host: 127.0.0.1
+        idx3:
+          ansible_port: 2226
+          ansible_host: 127.0.0.1
+
+    full:
+      children:
+        licensemaster:
+          hosts:
+            lm1:
+        deploymentserver:
+          hosts:
+            lm1:
+        dmc:
+          hosts:
+            lm1:
+        shdeployer:
+          hosts:
+            lm1:
+          vars:
+            #target_shc_group_name: nemesis4_shc
+        indexer:
+          children:
+            nemesis4_shc:
+              hosts:
+                sh1:
+                sh2:
+                sh3:
+        search:
+          children:
+            shc:
+            #nemesis4_shc:
+              hosts:
+                sh1:
+                sh2:
+                sh3:
+
+        #heavyforwarder:
+        #  hosts:
+        #    my-hf-01:
+        #    some-other-hf:
+
+    #    standalone:
+    #        hosts:
+    #          my-standalone-splunk-server:
+    #          my-other-standalone-splunk-server:
+
+    #uf:
+    #  children:
+
+    #   vmware:
+    #     hosts:
+    #       my-vm-ware-host-[001:100]:
+    #     vars:
+    #       clientName: vmware # Or create a "vmware.yml" file under group_vars and assign clientName there, either works
+
+    #   web:
+    #     hosts:
+    #       my-web-host-[01-05]: