topic Re: Deployment with Ansible in Deployment Architecture

Deployment with Ansible

callemang — Tue, 22 Dec 2020 19:23:06 GMT

Hello! I am new to Splunk and am tasked with automating the deployment (many many indexers on bare metal). I noticed that are two projects on github and was wondering if someone could clarify some questions.

https://github.com/splunk/splunk-ansible
1. This project seems thorough, but is it just made for the splunk-docker project?
2. The playbooks only run against localhost, meaning I can only deploy one instance at a time. This doesn't make sense to me, as one of the purposes of Ansible is to run against many hosts at once.
https://github.com/splunk/ansible-role-for-splunk
1. This project isn't as built out, but seems like I can deploy multiple instances at once on bare metal. The question is; can I still deploy everything I'll need (indexers, sh, cluster master, etc).

I know that these are broad questions. I would just like some advice on what project to go with.

Much thanks,

Chris

Re: Deployment with Ansible

gjanders — Wed, 30 Dec 2020 08:44:30 GMT

There was a presentation about using ansible to automate your splunk build at conf2020. You can view the slides and video on the splunk conf link https://conf.splunk.com/watch/conf-online.html

I believe the talk was https://conf.splunk.com/watch/conf-online.html?search=Tru1504c#/

Re: Deployment with Ansible

callemang — Wed, 30 Dec 2020 20:23:11 GMT

@gjanders , great resource! I watched it and learned about the ansible-role-for-splunk project. It seems that both ansible-role-for-splunk and splunk-ansible both have their features and drawbacks. I did, however find an example wrapper in splunk-ansible. I think I'm going to tailor that to work for Centos/RedHat.

Much thanks!!

Re: Deployment with Ansible

masonmorales — Sat, 06 Feb 2021 00:11:43 GMT

Hi @callemang I am one of the maintainers of ansible-role-for-splunk. If there is functionality that you'd like to see that is currently missing, please submit an enhancement request on our project's GitHub issue tracker.

Re: Deployment with Ansible

masonmorales — Sat, 06 Feb 2021 00:15:01 GMT

The name of the splunk-ansible project is a bit of misnomer. You are correct in that it was built solely for the purpose of deploying Splunk inside of Docker containers. ansible-role-for-splunk was built for managing non-Docker Splunk hosts. It also integrates with git for managing all of the apps, TAs, and configurations throughout your deployment and environments.

Re: Deployment with Ansible

callemang — Mon, 08 Feb 2021 18:44:18 GMT

Thanks @masonmorales, I ended up using your ansible-role-for-splunk project for our deployment and made some changes for our needs. Much thanks!

Re: Deployment with Ansible

AMCTRP — Tue, 02 Nov 2021 20:21:36 GMT

We are using AWX and looking at on-boarding the Splunk Ansible Role project code there. Has anybody done this? Any key insights to share? Thanks.

Re: Deployment with Ansible

callemang — Thu, 04 Nov 2021 12:54:24 GMT

There are two different projects we discussed, so I am not sure which you are referring to.

I looked into both in detail and went with ansible-role-for-splunk (https://github.com/splunk/ansible-role-for-splunk) because splunk-ansible is made for containerized deployments. We have been using that project in Tower for about a year now for new builds, version control in git, and general maintenance. We love it.

The project queues off of host groups a lot, so you will need to organize your inventory based off of their recommendations. It's a good structure to keep you organized, though.

Re: Deployment with Ansible

AMCTRP — Fri, 05 Nov 2021 00:21:03 GMT

Thank you for response.

Can you tell me what versions of Python and Ansible you are using with Ansible Role for Splunk? Thanks.