Going off the current most voted answer i have created terraform code to automate setting up a test splunk instance...
Uses splunk enterprise AMI (current at the time)
Installs apache and configures the reverse proxy (workaround for SPL-79993)
Fronts splunk with 2 classic LBs, One for web interface, one for HEC interface
Creates hosted zone with domain you provide (while running the TF code you must login to the aws console to get your Nameserver address for you new R53 hosted zone and update your domain provider with these (ie freenom). if the code timeouts just run it again after you have updated your domain registrar with the route53 name servers provided for you new zone)
Provides valid SSL certs for both loadbalancers (HEC requires a valid cert)
Current Security Group for the HEC LB endpoint is from US-East-1 firehose delivery service. please alter to your specifications
You will need to provide the following
Terraform Profile
domain (I used a free temp domain from freenom)
ssh public key (used to ssh into your splunk instance)
your public ip (used to update Security groups for sshing into your instance as well as connecting to the splunk web interface)
Terrafrom Code:
https://github.com/ChiefRiver/AWSSplunkInstance
,Going off the current most voted answer i have created terraform code to automate setting up a test splunk instance...
Uses splunk enterprise AMI (current at the time)
Installs apache and configures the reverse proxy (workaround for SPL-79993)
Fronts splunk with 2 classic LBs, One for web interface, one for HEC interface
Creates hosted zone with domain you provide (while running the TF code you must login to the aws console to get your Nameserver address for you new R53 hosted zone and update your domain provider with these (ie freenom). if the code timeouts just run it again after you have updated your domain registrar with the route53 name servers provided for you new zone)
Provides valid SSL certs for both loadbalancers (HEC requires a valid cert)
Terrafrom Code:
https://github.com/ChiefRiver/AWSSplunkInstance
... View more