Getting Data In

How can I get Ansible script to automate installation of splunk universal forwarder on multiple windows hosts?

AkritiParida
Engager

Does anybody have an ansible script which can be used to install the Splunk universal forwarder on multiple Windows hosts? I have set up a Linux like environment by installing cygwin on a Windows machine (2012 R2) and have installed the ansible version 2.3 on it.

J03T
Engager

This worked perfect for me:

Create playbook install_splunk_fwdr.yml with following:

---
- name: Install software
  hosts: mygroup
  gather_facts: false
  tasks:
    - name: Install Splunk Forwarder
      win_chocolatey:
        name: splunk-universalforwarder
        state: present

Make sure in your inventory file the following is configured:

[mygroup]
192.168.0.1
192.168.0.2
192.168.0.3
192.168.0.4
[mygroup:vars]
ansible_user=<USERNAME>
ansible_password=<PASSWORD>
ansible_port=5986
ansible_connection=winrm
ansible_winrm_server_cert_validation=ignore

Run playbook

ansible-playbook install_splunk_fwdr.yml

Thats it! 🙂

aknsun
Path Finder

Hi @J03T What are the prerequisites on the Windows side other than setting up winrm?

Thanks,
AKN

0 Karma

rashi83
Path Finder

@J03T Do you playbook for installing/upgrading Splunk Enterprise?

0 Karma

adonio
Ultra Champion
0 Karma
Get Updates on the Splunk Community!

Splunk + ThousandEyes: Correlate frontend, app, and network data to troubleshoot ...

 Are you tired of troubleshooting delays caused by siloed frontend, application, and network data? We've got a ...

Splunk Observability for AI

Don’t miss out on an exciting Tech Talk on Splunk Observability for AI!Discover how Splunk’s agentic AI ...

🔐 Trust at Every Hop: How mTLS in Splunk Enterprise 10.0 Makes Security Simpler

From Idea to Implementation: Why Splunk Built mTLS into Splunk Enterprise 10.0  mTLS wasn’t just a checkbox ...