Defined Type: splunk::input::monitor

Defined in:
manifests/input/monitor.pp

Overview

Define splunk::input::monitor

Parameters:

  • path (Any)
  • host (Any) (defaults to: undef)
  • index (Any) (defaults to: undef)
  • source (Any) (defaults to: undef)
  • sourcetype (Any) (defaults to: undef)
  • queue (Any) (defaults to: undef)
  • host_regex (Any) (defaults to: undef)
  • host_segment (Any) (defaults to: undef)
  • whitelist (Any) (defaults to: undef)
  • blacklist (Any) (defaults to: undef)
  • crcSalt (Any) (defaults to: undef)
  • initCrcLength (Any) (defaults to: undef)
  • ignoreOlderThan (Any) (defaults to: undef)
  • followTail (Any) (defaults to: undef)
  • alwaysOpenFile (Any) (defaults to: undef)
  • time_before_close (Any) (defaults to: undef)
  • recursive (Any) (defaults to: undef)
  • followSymlink (Any) (defaults to: undef) 


3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
 
# File 'manifests/input/monitor.pp', line 3

define splunk::input::monitor ( $path,
  $host               = undef,
  $index              = undef,
  $source             = undef,
  $sourcetype         = undef,
  $queue              = undef,
  $host_regex         = undef,
  $host_segment       = undef,
  $whitelist          = undef,
  $blacklist          = undef,
  $crcSalt            = undef,
  $initCrcLength      = undef,
  $ignoreOlderThan    = undef,
  $followTail         = undef,
  $alwaysOpenFile     = undef,
  $time_before_close  = undef,
  $recursive          = undef,
  $followSymlink      = undef
) {
  include splunk

  if ! defined(Concat['inputs.conf']) {
    concat { 'inputs.conf':
      path   => "${splunk::basedir}/etc/system/local/inputs.conf",
      notify => Service['splunk']
    }
  }
  concat::fragment { "monitor-${title}":
    target  => 'inputs.conf',
    content => template( 'splunk/input/monitor.erb' )
  }
}