Merge pull request #72 from midnight5ky/add_indexer_clustering_configurations

Add indexer clustering configurations

Author: Mason Morales

playbooks/splunk_idxc_deploy.yml

@@ -0,0 +1,23 @@
+# Example playbook to install Splunk and configure a basic indexer cluster
+# Ensure that the following vars are configured: ansible_user, ansible_ssh_private_key_file, splunk_uri_lm, and splunk_admin_password
+- hosts:
+    - clustermanager
+    - indexers
+  roles:
+    - ../roles/splunk
+  vars:
+    - deployment_task: check_splunk.yml
+
+- hosts:
+    - clustermanager
+  roles:
+    - ../roles/splunk
+  vars:
+    - deployment_task: configure_idxc_manager.yml
+
+- hosts:
+    - indexers
+  roles:
+    - ../roles/splunk
+  vars:
+    - deployment_task: configure_idxc_member.yml

playbooks/splunk_shc_deploy.yml

@@ -2,6 +2,7 @@
 # Ensure that the following vars are configured: ansible_user, ansible_ssh_private_key_file, splunk_admin_password, splunk_user_seed: true
 - hosts:
     - shdeployer
+    - shc
   roles:
     - ../roles/splunk
   vars:
@@ -14,13 +15,6 @@
   vars:
     - deployment_task: configure_shc_deployer.yml
 
-- hosts:
-    - shc
-  roles:
-    - ../roles/splunk
-  vars:
-    - deployment_task: check_splunk.yml
-
 - hosts:
     - shc
   roles:

roles/splunk/defaults/main.yml

@@ -36,6 +36,12 @@ git_key: undefined # Path to SSH key for cloning repositories - Note that this m
 git_project: undefined
 git_version: master # Configure default version to clone, overridable inside the git_apps dictionary within host_vars
 splunk_app_deploy_path: undefined # Path under $SPLUNK_HOME/ to deploy apps to - Note that this may be set in group_vars, host_vars, playbook vars, or inside the git_apps dictionary within host_vars
+# IDXC Vars
+splunk_idxc_key: mypass4symmkey
+splunk_idxc_rf: 2
+splunk_idxc_sf: 2
+splunk_idxc_rep_port: 9887
+splunk_idxc_label: myidxc
 splunk_apply_cluster_bundle_retries: 3 # How many times to retry indexer cluster bundle apply if it fails
 splunk_apply_cluster_bundle_delay: 60 # Delay in seconds between retries to apply indexer cluster bundle
 splunk_apply_shcluster_bundle_retries: 3 # How many times to retry SHC bundle apply if it fails

roles/splunk/tasks/check_splunk.yml

@@ -19,11 +19,7 @@
   block:
 
     - name: Run splunk version command to check currently installed version
-      command: "{{ splunk_home }}/bin/splunk version --answer-yes --auto-ports --no-prompt --accept-license"
-      register: current_version
-      become: true
-      become_user: "{{ splunk_nix_user }}"
-      changed_when: false
+      include_tasks: check_splunk_version.yml
 
     - name: "Checkpoint: Version" ##########################
       debug:

roles/splunk/tasks/check_splunk_version.yml

@@ -0,0 +1,10 @@
+- name: Run splunk version command to check currently installed version
+  command: "{{ splunk_home }}/bin/splunk version --answer-yes --auto-ports --no-prompt --accept-license"
+  register: current_version
+  become: true
+  become_user: "{{ splunk_nix_user }}"
+  changed_when: false
+
+- name: Get Splunk version number only
+  set_fact:
+    splunk_version_release: "{{ current_version.stdout | regex_search ('\\d+\\.\\d+') }}"

roles/splunk/tasks/configure_idxc_manager.yml

@@ -0,0 +1,29 @@
+---
+- name: Run splunk version command to check currently installed version
+  include_tasks: check_splunk_version.yml
+
+# Splunk version < 8.1 supports mode=master
+# https://docs.splunk.com/Documentation/Splunk/8.0.9/Indexer/Configuremasterwithserverconf
+# Splunk version >= 8.1 supports mode=manager
+# https://docs.splunk.com/Documentation/Splunk/latest/Indexer/Configuremanagerwithserverconf
+- name: Setting clustering mode based on Splunk version number
+  set_fact:
+    mode_value: "{% if splunk_version_release | int < 8.1 %}master{% else %}manager{% endif %}"
+
+- name: Configure clustering stanza for cluster manager node
+  ini_file:
+    path: "{{ splunk_home }}/etc/system/local/server.conf"
+    section: clustering
+    option: "{{ item.option }}"
+    value: "{{ item.value }}"
+    mode: 0644
+    owner: "{{ splunk_nix_user }}"
+    group: "{{ splunk_nix_group }}"
+  become: true
+  notify: restart splunk
+  loop:
+    - { option: "mode", value: "{{ mode_value}}" }
+    - { option: "replication_factor", value: "{{ splunk_idxc_rf }}" }
+    - { option: "search_factor", value: "{{ splunk_idxc_sf }}" }
+    - { option: "pass4SymmKey", value: "{{ splunk_idxc_key }}" }
+    - { option: "cluster_label", value: "{{ splunk_idxc_label }}" }

roles/splunk/tasks/configure_idxc_member.yml

@@ -0,0 +1,21 @@
+---
+- name: Run splunk version command to check currently installed version
+  include_tasks: check_splunk_version.yml
+
+# Splunk version >= 8.1 supports mode=peer
+# https://docs.splunk.com/Documentation/Splunk/latest/Indexer/ConfigurepeerswithCLI
+# Splunk version < 8.1 supports mode=slave
+# https://docs.splunk.com/Documentation/Splunk/8.0.9/Indexer/ConfigurepeerswithCLI
+- name: Setting clustering mode based on Splunk version number
+  set_fact:
+    mode_value: "{% if splunk_version_release | int < 8.1 %}slave{% else %}peer{% endif %}"
+
+- name: Configure idxc member
+  command: "{{ splunk_home }}/bin/splunk edit cluster-config -mode {{ mode_value }} -auth {{ splunk_auth }} -master_uri {{ splunk_uri_cm }} -replication_port {{ splunk_idxc_rep_port }} -secret {{ splunk_idxc_key }}"
+  become: true
+  become_user: "{{ splunk_nix_user }}"
+  register: idxc_peer_init_result
+  changed_when: idxc_peer_init_result.rc == 0
+  failed_when: idxc_peer_init_result.rc != 0
+  notify: restart splunk
+  no_log: true