![]() ![]() Alternatively you can install Splunk via Bolt.Please see Splunk Installation if you need to install Splunk.Install the Puppet Report Viewer app in Splunk if not already installed.For Open Source Puppet installations please see the Custom Installation section. Instructions assume you are using Puppet Enterprise. While most of this module is PE and Open Source, using the PE Event Forwarding processor is PE only because it gathers data from API's that exist only in Puppet Enterprise.This was tested on the Puppet Enterprise LTS release, Puppet 6 and Puppet 7, using stock gems of yaml, json, and net::https. Puppet Enterprise (PE) or Open Source Puppet.Example plans are included which demonstrate task usage. There are two Tasks included in this module, splunk_hec:bolt_apply and splunk_hec:bolt_result, that provide a pre-packaged way to compose Bolt Plans that submit data to Splunk every time they are run. For additional information on configuring Puppet Alert Actions, please see our documentation located here. The Puppet Alert Actions app allows you to run custom Tasks in Puppet Enterprise or retrieve detailed Report information about a particular Puppet Event that would be sent to the Puppet Report Viewer. There is also the Puppet Alert Actions app, which contains the alert actions that were previously shipped in the Puppet Report Viewer: Please see the documentation in that module for details on how to install and configure that module. Note: This is a PE only feature and depends on the PE Event Forwarding module being installed and classified on the Puppet Server nodes in your environment. To enable this feature, after the PE Event Forwarding module has been installed, set the events_reporting_enabled parameter on the splunk class to true. This data can include the details of Task and Plan executions that were initiated by the Puppet Orchestrator (clicking execute task|plan from the console or puppet command line), or it can be events from rbac, the node classifier, the console, or code-manager. See Fact Terminus Support for details.Ī PE Event Forwarding processor for sending data received from the PE Event Forwarding module to Splunk. Set the enable_reports parameter to true.įor more advanced configuration options including sending reports based on specific conditions see the Customized Reporting section below.Ī fact terminus to submit node facts to Splunk.Set the token parameter which will be the HEC token you create in Splunk.Set the url parameter which refers to your Splunk Hec url. ![]() Classify your Puppet Servers with the splunk_hec class.After this module is installed in your environment, to enable sending node reports to Splunk, do the following: When a Puppet agent completes a run and submits some of the report data to Puppet, this module's processor can be invoked to send that report to Splunk. This module provides three services to Puppet and Splunk users.Ī report processor to allow sending Puppet Agent run reports to Splunk.
0 Comments
Leave a Reply. |