Splunk In VPC

Configuration in this directory creates kinesis firehose stream with Direct Put as source and Splunk within VPC as destination.

This example can be tested with Demo Data in Kinesis Firehose Console.

Usage

To run this example you need to execute:

$ terraform init
$ terraform plan
$ terraform apply

It's necessary configure the following variables:

splunk_hec_endpoint      = "https://http-inputs-mydomain.splunkcloud.com:443"
splunk_hec_endpoint_type = "<Raw|Event>"
splunk_hec_token         = "<splunk_hec_token>"

Requirements

Name	Version
terraform	>= 0.13.1
aws	~> 5.0
random	>= 2.0

Providers

Name	Version
aws	~> 5.0
random	>= 2.0

Modules

Name	Source	Version
firehose	../../../	n/a
vpc	terraform-aws-modules/vpc/aws	n/a

Resources

Name	Type
aws_kms_key.this	resource
aws_s3_bucket.s3	resource
aws_security_group.this	resource
random_pet.this	resource

Inputs

Name	Description	Type	Default	Required
name_prefix	Name prefix to use in resources	string	"firehose-to-splunk"	no
splunk_hec_endpoint	Splunk Hec Endpoint	string	n/a	yes
splunk_hec_endpoint_type	Splunk Hec Endpoint Type	string	n/a	yes
splunk_hec_token	Splunk Hec Token	string	n/a	yes
vpc_azs	Redshift AZs	list(string)	[ "eu-west-1a", "eu-west-1b", "eu-west-1c" ]	no
vpc_cidr	VPC CIDR block	string	"10.0.0.0/16"	no
vpc_private_subnets	VPC Private Subnets	list(string)	[ "10.0.1.0/24", "10.0.2.0/24", "10.0.3.0/24" ]	no
vpc_public_subnets	VPC Public Subnets	list(string)	[ "10.0.101.0/24", "10.0.102.0/24", "10.0.103.0/24" ]	no

Outputs

Name	Description
destination_security_group_rule_ids	Security Group Rules ID created in Destination Security group
firehose_cidr_blocks	Firehose stream cidr blocks to unblock on destination security group
firehose_role	Firehose Role