SAD - Splunk Automated Deployments

A Python script to automate splunk deployments and make configurations as simple and straight forward as possible.

Features

• Automatically scrapes Splunk's website so that all versions of Splunk are avaliable for download.
• Provides SSH capabilities so that script only needs to be run from one machine.
• Sets up a deployment server to push apps to all other machines.
• Points all machines back to the deployment server.
• Python packages required can be installed by the script if they are missing. No need to manually install packages.
• Supports Windows and Linux operating systems

Dependencies

• BeautifulSoup - Web page scraping library
• Requests - HTTP Library
• Paramiko - A pure python implementation of SSH

Installation

Download the latest release of python below:

Download and install Pip using the following commands:

curl https://bootstrap.pypa.io/get-pip.py -o get-pip.py
python get-pip.py

Dependencies can manually be installed using requirements.txt:

pip install -r requirements.txt

Or individually installed via Pip:

pip install beautifulsoup4
pip install requests
pip install paramiko

To Do:

• Fetch all versions of Splunk Enterprise for download
• Fetch all versions of the Splunk Forwarder
• Download and install Splunk with respect to the OS
• Get a list of all apps on the Splunkbase site so that the user can install those as well
• Add SSH to access all other machines in the deployment
• Configure best practices on each machine (Disable THP, etc.)
• Create directories and apps on the deployment server
• Point all other machines back to the deployment server
• Create output file of configuration created
• Allow loading of configuration files for reusability
• Add support for OSX