Closed amirulalif closed 10 months ago
Where did you install the acl package? For Ubuntu this is needed on the Splunk host you install with the framework. Please see the documentation for the splunk_config.yml on how to add this during install.
Please add this to your splunk_config.yml
os:
# Example for missing ACL support in Ubuntu on AWS. But can be added in the os.packages section as well.
remote_command: 'sudo apt-get install -y acl'
Thanks,
will add the remote_command to install acl
in splunk_config.yml
Describe the bug
To Reproduce Steps to reproduce the behavior:
virtualbox:
box: "centos/7" # Default
box: "ubuntu/jammy64"
Splunk default settings
splunk_defaults: splunk_env_name: splk splunk_version: '9.1.1' splunk_admin_password: 'password' splunk_license_file: Splunk_Enterprise.lic
splunk_indexes:
test1:
test2_metrics:
datatype: metric
Splunk hosts with its settings
splunk_hosts:
Indexer and Search Head on single node
name: shidx roles:
Universal Forwarder
- name: uf
roles:
- universal_forwarder
$ ansible-playbook ansible/deploy_site.yml
Screenshots
Desktop (please complete the following information):
Already try