Defined Type: splunk::index

Defined in:
manifests/index.pp

Overview

splunk::index(

create a index snippet to be concatenated into $SPLUNK_HOME/etc/system/local/indexes.conf

Parameters:

  • frozen_time (Optional[Integer]) (defaults to: 188697600)
  • user (Optional[String]) (defaults to: $splunk::user)
  • group (Optional[String]) (defaults to: $splunk::group)
  • dir (Optional[String]) (defaults to: $splunk::dir)
  • sign (Optional[Boolean]) (defaults to: false)
  • archive (Optional[Boolean]) (defaults to: false)
  • remote (Optional[Boolean]) (defaults to: false)
  • options (Optional[Array]) (defaults to: undef) 


6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
 
# File 'manifests/index.pp', line 6

define splunk::index(
  Optional[Integer] $frozen_time = 188697600,
  Optional[String] $user         = $splunk::user,
  Optional[String] $group        = $splunk::group,
  Optional[String] $dir          = $splunk::dir,
  Optional[Boolean] $sign        = false,
  Optional[Boolean] $archive     = false,
  Optional[Boolean] $remote      = false,
  Optional[Array] $options       = undef
) {
  $local = "${dir}/etc/system/local"

  file { "${local}/indexes.d/${title}":
    owner   => $user,
    group   => $group,
    mode    => '0440',
    content => template("${module_name}/indexes.d/index.erb"),
    require => File["${local}/indexes.d"],
    notify  => Exec['update-indexes'],
  }
}