cm_2idxc1site_3shc_uf.yml

---
# splunk_config.yml
plugin: splunk-platform-automator

virtualbox:
#  box: "centos/7" # Default
#  box: "ubuntu/xenial64"

# Splunk default settings
splunk_defaults:
  # splunk_env_name: splk
  # splunk_version: '8.2.3'
  # splunk_architecture: amd64
  # splunk_admin_password: 'splunklab'
  # splunk_license_file: Splunk_Enterprise.lic
  # splunk_indexes:
  #   test1:
  #   test2_metrics:
  #     datatype: metric

# Indexer Cluster settings
splunk_idxclusters:
  - idxc_name: idxc1
    idxc_password: splunkidxc
    idxc_replication_port: 9887
    idxc_site_rf: 'origin:2, total:2'
    idxc_site_sf: 'origin:2, total:2'

# Search Head Cluster settings
splunk_shclusters:
  - shc_name: shc1
    shc_site: site0
    shc_password: splunkshc
    shc_replication_port: 9887

# Splunk hosts with its settings
splunk_hosts:
  # Cluster Manager
  - name: cm
    roles:
      - deployment_server
      - deployer
      - cluster_manager
      - monitoring_console
      #- license_manager
    idxcluster: idxc1
    shcluster: shc1
    site: site0

  # Cluster Indexers (site1)
  - iter:
      prefix: idx
      numbers: 1..2
    roles:
      - indexer
    idxcluster: idxc1
    site: site1

  # Search Heads
  - iter:
      prefix: sh
      numbers: 1..3
    roles:
      - search_head
    shcluster: shc1

  # Universal Forwarder
  - name: uf
    roles:
      - universal_forwarder