Increases FRTIB SH Size + Adds 6 additional indexers

prod/aws-us-gov/mdr-prod-frtib/160-splunk-indexer-cluster/terragrunt.hcl

@@ -13,7 +13,7 @@ locals {
 # working directory, into a temporary folder, and execute your Terraform commands in that folder.
 terraform {
   # Double slash is intentional and required to show root of modules
-  source = "git@github.xdr.accenturefederalcyber.com:mdr-engineering/xdr-terraform-modules.git//base/splunk_servers/indexer_cluster?ref=v4.2.10"
+  source = "git@github.xdr.accenturefederalcyber.com:mdr-engineering/xdr-terraform-modules.git//base/splunk_servers/indexer_cluster?ref=v4.3.7"
 }
 
 dependency "vpc" {

prod/aws-us-gov/mdr-prod-frtib/170-splunk-searchhead/terragrunt.hcl

@@ -13,7 +13,7 @@ locals {
 # working directory, into a temporary folder, and execute your Terraform commands in that folder.
 terraform {
   # Double slash is intentional and required to show root of modules
-  source = "git@github.xdr.accenturefederalcyber.com:mdr-engineering/xdr-terraform-modules.git//base/splunk_servers/searchhead?ref=v4.2.3"
+  source = "git@github.xdr.accenturefederalcyber.com:mdr-engineering/xdr-terraform-modules.git//base/splunk_servers/searchhead?ref=v4.3.7"
 }
 
 dependency "vpc" {

prod/aws-us-gov/mdr-prod-frtib/account.hcl

@@ -30,7 +30,7 @@ locals {
 
   ]
   splunk_legacy_cidr = []        # Should not be needed for new customers
-  splunk_asg_sizes   = [1, 1, 1] # How many indexers in each site
+  splunk_asg_sizes   = [3, 3, 3] # How many indexers in each site
 
 
   account_tags = {
@@ -58,10 +58,10 @@ locals {
   instance_types = {
     "alsi-master"    = "t3a.small",
     "alsi-worker"    = "t3a.small",
-    "splunk-cm"      = "m5a.xlarge",   # legacy: t2.small
-    "splunk-indexer" = "i3en.3xlarge", # legacy: t2.small, but whats the point if we don't have instance storage.
-    "splunk-hf"      = "m5a.xlarge",   # legacy: t2.medium
-    "splunk-sh"      = "m5a.4xlarge",  # legacy: ? not sure
+    "splunk-cm"      = "m5a.xlarge",
+    "splunk-indexer" = "i3en.3xlarge",
+    "splunk-hf"      = "m5a.xlarge",
+    "splunk-sh"      = "m5a.8xlarge", # 2022-05-25 - increased from m5a.4xlarge in prep for go live day
     "splunk-cust-sh" = "m5a.xlarge",
   }