ansible-role-for-splunk

ansible-role-for-splunk copied to clipboard

SmartStore is usually no fun to configure and it would be nice if there was a task for testing this on indexers - everything is done in apps, except for the testing and it would be cool if we could replicate this from the smartstore docs in ansible:

To confirm remote storage access across the indexer cluster:

• Place a sample text file in the remote store.
• From one of the peer nodes, run this command, which recursively lists any files that are present in the remote store: splunk cmd splunkd rfs -- ls --starts-with volume:remote_store
• If you see the sample file when you run the command, you have access to the remote store.

Validate data transfer to the remote store:

• Send some data to the indexers.
• Wait for buckets to roll. If you don't want to wait for buckets to roll naturally, you can manually roll some buckets from a peer node: splunk _internal call /data/indexes/<index_name>/roll-hot-buckets -auth <admin>:<password>
• Look for warm buckets being uploaded to remote storage.
• Validate data transfer from the remote store: