|
|
@@ -12,10 +12,9 @@ locals {
|
|
|
splunk_data_sources = [
|
|
|
"199.16.64.3/32", # TODO: Add customer's public IP addresses
|
|
|
]
|
|
|
- splunk_legacy_cidr = [ ] # Should not be needed for new customers
|
|
|
+ splunk_legacy_cidr = [ "10.2.0.0/22" ] # Should not be needed for new customers
|
|
|
splunk_asg_sizes = [ 1, 1, 1 ] # How many indexers in each site
|
|
|
|
|
|
-
|
|
|
account_tags = {
|
|
|
"Client": local.splunk_prefix,
|
|
|
}
|
|
|
@@ -41,10 +40,10 @@ locals {
|
|
|
instance_types = {
|
|
|
"alsi-master" = "t3a.small",
|
|
|
"alsi-worker" = "t3a.small",
|
|
|
- "splunk-cm" = "t3a.small", # legacy: t2.small
|
|
|
- "splunk-indexer" = "i3en.large", # legacy: t2.small, but whats the point if we don't have instance storage.
|
|
|
- "splunk-hf" = "t3a.small", # legacy: t2.medium
|
|
|
- "splunk-sh" = "t3a.small", # legacy: ? not sure
|
|
|
+ "splunk-cm" = "m5a.xlarge", # legacy: t2.small
|
|
|
+ "splunk-indexer" = "i3en.3xlarge", # legacy: t2.small, but whats the point if we don't have instance storage.
|
|
|
+ "splunk-hf" = "m5a.xlarge", # legacy: t2.medium
|
|
|
+ "splunk-sh" = "m5a.4xlarge", # legacy: ? not sure
|
|
|
}
|
|
|
|
|
|
# Splunk Volume Sizes are probably fine at defaults
|
Fred Damstra [afs macbook]