|
|
@@ -16,8 +16,6 @@ Commit [35d2254](https://github.xdr.accenturefederalcyber.com/mdr-engineering/xd
|
|
|
|
|
|
To add it to existing customers/slices, copy the `145-splunk-smartstore-s3/` directory from `xdr-terraform-live/test/aws-us-gov/mdr-test-modelclient/` to the target customer's directory and update the referenced tag if necessary to v3.2.14 or higher, then run `terragrunt-local apply` to create the customer's SmartStore S3 bucket.
|
|
|
|
|
|
-**TODO**: Copy `145-splunk-smartstore-s3` to `000-skeleton`
|
|
|
-
|
|
|
### Ensure the Index Cluster's Search Factor and Replication Factor Are Equal
|
|
|
|
|
|
SF must equal RF. This setting is usually found in the Cluster Manager's `/etc/system/local/server.conf`
|
|
|
@@ -74,7 +72,7 @@ The same commit referenced above for the msoc-skeleton-cm repository added `remo
|
|
|
|
|
|
This CA is used by Splunk to validate the certificates for the S3 bucket as well as the KMS queries agains us-gov-east-1. See https://www.amazontrust.com/repository/
|
|
|
|
|
|
-This file was added to the indexers' Salt state with commit [6d5dc54](https://github.xdr.accenturefederalcyber.com/mdr-engineering/msoc-infrastructure/commit/6d5dc54755830b2b14130aaedac99be4d39d0ec0#diff-63479ad69a090b258277ec8fba6f99419a2ffb248981510657c944ccd1148e97) and can be added to the indexers with `salt customer-splunk-idx-* state.sls splunk.indexers` (it may already be present).
|
|
|
+This file was added to the indexers' Salt state with commit [6d5dc54](https://github.xdr.accenturefederalcyber.com/mdr-engineering/msoc-infrastructure/commit/6d5dc54755830b2b14130aaedac99be4d39d0ec0#diff-63479ad69a090b258277ec8fba6f99419a2ffb248981510657c944ccd1148e97) and can be added to the indexers with `salt customer-splunk-idx-* state.sls splunk.indexer` (it may already be present).
|
|
|
|
|
|
### Update `indexes.conf` and `server.conf` Deployed by the Cluster Manager
|
|
|
|
Colby Williams