forked from berthayes/cp-siem
-
Notifications
You must be signed in to change notification settings - Fork 1
/
default.yml
142 lines (141 loc) · 3.44 KB
/
default.yml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
---
ansible_connection: local
ansible_environment: {}
ansible_post_tasks: []
ansible_pre_tasks: []
cert_prefix: https
config:
baked: default.yml
defaults_dir: /tmp/defaults
env:
headers: null
var: SPLUNK_DEFAULTS_URL
verify: true
host:
headers: null
url: null
verify: true
max_delay: 60
max_retries: 3
max_timeout: 1200
dmc_asset_interval: 3,18,33,48 * * * *
dmc_forwarder_monitoring: false
docker: true
es_ssl_enablement: --ssl_enablement auto
hide_password: false
java_download_url: null
java_update_version: null
java_version: null
retry_delay: 6
retry_num: 60
shc_sync_retry_num: 60
splunk:
admin_user: admin
allow_upgrade: true
app_paths:
default: /opt/splunk/etc/apps
deployment: /opt/splunk/etc/deployment-apps
httpinput: /opt/splunk/etc/apps/splunk_httpinput
idxc: /opt/splunk/etc/master-apps
shc: /opt/splunk/etc/shcluster/apps
appserver:
port: 8065
asan: false
auxiliary_cluster_masters: []
build_url_bearer_token: null
cluster_master_url: null
connection_timeout: 0
declarative_admin_password: false
deployer_url: null
dfs:
dfc_num_slots: 4
dfw_num_slots: 10
dfw_num_slots_enabled: false
enable: false
port: 9000
spark_master_host: 127.0.0.1
spark_master_webui_port: 8080
disable_popups: false
dsp:
cert: null
enable: false
pipeline_desc: null
pipeline_name: null
pipeline_spec: null
server: forwarders.scp.splunk.com:9997
verify: false
enable_service: false
es:
ssl_enablement: auto
exec: /opt/splunk/bin/splunk
group: splunk
hec:
cert: null
enable: true
password: null
port: 8090
ssl: true
token: ef16f05f-40e0-4108-a644-5323e02aaa44
home: /opt/splunk
http_enableSSL: false
http_enableSSL_cert: null
http_enableSSL_privKey: null
http_enableSSL_privKey_password: null
http_port: 8000
idxc:
discoveryPass4SymmKey: K2vDtcOOQGjDmMOlABNbwr4aEScGw6jDmMOswokeImg7
label: idxc_label
pass4SymmKey: K2vDtcOOQGjDmMOlABNbwr4aEScGw6jDmMOswokeImg7
replication_factor: 3
replication_port: 9887
search_factor: 3
secret: K2vDtcOOQGjDmMOlABNbwr4aEScGw6jDmMOswokeImg7
ignore_license: false
kvstore:
port: 8191
launch: {}
license_download_dest: /tmp/splunk.lic
license_master_url: ''
multisite_master_port: 8089
multisite_replication_factor_origin: 2
multisite_replication_factor_total: 3
multisite_search_factor_origin: 1
multisite_search_factor_total: 3
opt: /opt
pass4SymmKey: null
password: dingdong
pid: /opt/splunk/var/run/splunk/splunkd.pid
root_endpoint: null
s2s:
ca: null
cert: null
enable: true
password: null
port: 9997
ssl: false
search_head_captain_url: null
secret: null
service_name: null
set_search_peers: true
shc:
deployer_push_mode: null
label: shc_label
pass4SymmKey: IcOiw643w4jDqXJpw61iw4DCrMO0w6PCisK5wr4VwrrCkTLCrsKWBg==
replication_factor: 3
replication_port: 9887
secret: IcOiw643w4jDqXJpw61iw4DCrMO0w6PCisK5wr4VwrrCkTLCrsKWBg==
smartstore: null
ssl:
ca: null
cert: null
enable: true
password: null
svc_port: 8089
tar_dir: splunk
user: splunk
wildcard_license: false
splunk_home_ownership_enforcement: true
splunkbase_password: null
splunkbase_token: null
splunkbase_username: null
wait_for_splunk_retry_num: 60