Splunk Enterprise

Puppet module to deploy UniversalForwarder


Dear all,

please find here my attempt at making a working Puppet module to deploy the uf en-masse. It's tested and working on CentOS, Ubuntu and Opensuse, but YMMV. It defaults on a standard template unless you place a .erb file in the templates folder. Gets its parameters from Hiera (uf.yaml).

Tags (1)


I love it thanks!


Yes! You can find it here: http://forge.puppetlabs.com/SIG/splunk . Soon I'll put there the others too (I'm working on a fully automated monitoring solution deployed via puppet: collectd to send metrics to graphite, sar and *NIX application for more metrics, nagios for alerts and forwarder for the logs).


Have you put this up on Puppet Forge yet (forge.puppetlabs.com) ? I think it would be really useful, especially since a lot of the existing modules are almost exclusively for Red Hat or Ubuntu systems.

0 Karma
Get Updates on the Splunk Community!

.conf23 Registration is Now Open!

Time to toss the .conf-etti 🎉 —  .conf23 registration is open!   Join us in Las Vegas July 17-20 for ...

Don't wait! Accept the Mission Possible: Splunk Adoption Challenge Now and Win ...

Attention everyone! We have exciting news to share! We are recruiting new members for the Mission Possible: ...

Unify Your SecOps with Splunk Mission Control

In today’s post, I'm excited to share some recent Splunk Mission Control innovations. With Splunk Mission ...