Does anybody actually use the puppetlabs-splunk module ? I've been battling this for too many hours and have a bunch of questions. I can't really find any references via Google that this is getting much usage, and the documentation in the module itself seems essentially non-existent, but I thought I'd ask just in case:
- how do you define a section for inputs.conf that has multiple key=value pairs If I wanted a inputs.conf stanza of the following, how do I make that happen ? [monitor:///var/log/nginx] disabled = false index = main sourcetype = nginx I came up with the following, but the problem is it only permits 'one' setting and value..... splunkforwarder_input { 'nginx': section => 'monitor:///var/log/nginx', setting => 'disabled' value => 'false', } Is there a way to get it to accept multiple free-form multiple key=value pairs ? It's using their ini module under the hood isn't it ? Is there a secret decoder ring of examples someplace ? - the README file seems totally wrong to me. On a centos6 system, it doesn't try to install the universal forwarder rpm from the source tree it tells you to build, and it doesn't use the version/build info it tells you to put into parameters. It does a 'yum install splunkforwarder' with odd options, and no (visible to me) way to control yum options, which repo(s) are enabled/disabled, etc. While the installation 'does' work and it enables and starts the process well, the whole thing seems like half a solution with a tenth of the docs that I'd expect a 'supported' module to have. FWIW, I only figured out what was expected by reading the (minimal) tests in the module sources. I'd have expected some examples/readme files to save hundreds of potential users that pain. class { 'splunk::params': version => '6.1.2', build => '213098', server => 'splunk.apps.oris.washington.edu', } class { 'splunk::forwarder' : } Am I missing something in how to decipher this thing ? Should we have to spend hours trying to reverse engineer a basically undocumented module that doesn't even really say what it does/doesn't support in terms of functionality or should we just shop elsewhere or roll our own ? Guess I'm pretty lost/confused/tired of battling this thing. Ideas ? -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-users+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/puppet-users/8b8b7771-8de0-44c0-a419-be847ffe77a0%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.