xdr-terraform-modules/base/splunk_servers/searchhead/config.tf

locals {

  sh_instance_type_default = "m5a.4xlarge"
  sh_instance_type_exceptions = {
    mdr-prod-frtib               = "m5a.8xlarge",
    afs-mdr-test-c2-gov          = "t3a.small",
    afs-mdr-test-modelclient-gov = "t3a.small"
  }
  sh_instance_type = lookup(local.sh_instance_type_exceptions, var.account_name, local.sh_instance_type_default)

  fm_shared_search_instance_type_default = "m5a.large"
  fm_shared_search_instance_type_exceptions = {
    afs-mdr-test-c2-gov = "t3a.small",
  }
  fm_shared_search_instance_type = lookup(local.fm_shared_search_instance_type_exceptions, var.account_name, local.fm_shared_search_instance_type_default)

  splunk_mc_instance_type_default = "m5a.large"
  splunk_mc_instance_type_exceptions = {
    afs-mdr-test-c2-gov = "t3a.small",
  }
  splunk_mc_instance_type = lookup(local.splunk_mc_instance_type_exceptions, var.account_name, local.splunk_mc_instance_type_default)

  # Some voodoo here to handle different instance sizes for the different C2 search heads.
  instance_type_map = {
    fm = local.fm_shared_search_instance_type,
    mc = local.splunk_mc_instance_type,
  }
  instance_type = lookup(local.instance_type_map, var.prefix, local.sh_instance_type)


  volume_sizes_default = {
    "swap" : 8,           # minimum: 8
    "/" : 20,             # minimum: 10
    "/home" : 4,          # minimum: 4
    "/var" : 15,          # minimum: 15
    "/var/tmp" : 4,       # minimum: 4
    "/var/log" : 8,       # minimum: 8
    "/var/log/audit" : 8, # minimum: 8
    "/tmp" : 4,           # minimum: 4
    "/opt/splunk" : 30,   # No minimum; not in base image
  }
  volume_sizes_exceptions = {
    mdr-prod-afs = {
      "swap" : 8,           # minimum: 8
      "/" : 20,             # minimum: 20
      "/home" : 4,          # minimum: 4
      "/var" : 15,          # minimum: 15
      "/var/tmp" : 4,       # minimum: 4
      "/var/log" : 8,       # minimum: 8
      "/var/log/audit" : 8, # minimum: 8
      "/tmp" : 4,           # minimum: 4
      "/opt/splunk" : 130,  # No minimum; not in base image
    },
    mdr-prod-bas = {
      "swap" : 8,           # minimum: 8
      "/" : 20,             # minimum: 20
      "/home" : 4,          # minimum: 4
      "/var" : 15,          # minimum: 15
      "/var/tmp" : 4,       # minimum: 4
      "/var/log" : 8,       # minimum: 8
      "/var/log/audit" : 8, # minimum: 8
      "/tmp" : 4,           # minimum: 4
      "/opt/splunk" : 60,   # No minimum; not in base image
    },
    mdr-prod-dgi = {
      "swap" : 8,           # minimum: 8
      "/" : 20,             # minimum: 20
      "/home" : 4,          # minimum: 4
      "/var" : 15,          # minimum: 15
      "/var/tmp" : 4,       # minimum: 4
      "/var/log" : 8,       # minimum: 8
      "/var/log/audit" : 8, # minimum: 8
      "/tmp" : 4,           # minimum: 4
      "/opt/splunk" : 60,   # No minimum; not in base image
    },
    afs-mdr-prod-c2-gov = {
      "swap" : 8,           # minimum: 8
      "/" : 20,             # minimum: 20
      "/home" : 4,          # minimum: 4
      "/var" : 15,          # minimum: 15
      "/var/tmp" : 4,       # minimum: 4
      "/var/log" : 8,       # minimum: 8
      "/var/log/audit" : 8, # minimum: 8
      "/tmp" : 4,           # minimum: 4
      "/opt/splunk" : 60,   # No minimum; not in base image
    },
    mdr-prod-frtib = {
      "swap" : 8,           # minimum: 8
      "/" : 20,             # minimum: 20
      "/home" : 4,          # minimum: 4
      "/var" : 15,          # minimum: 15
      "/var/tmp" : 4,       # minimum: 4
      "/var/log" : 8,       # minimum: 8
      "/var/log/audit" : 8, # minimum: 8
      "/tmp" : 4,           # minimum: 4
      "/opt/splunk" : 60,   # No minimum; not in base image
    },
  }
  volume_sizes = lookup(local.volume_sizes_exceptions, var.account_name, local.volume_sizes_default)
}