Adding monitors and indexes via resources about chef-splunk HOT 3 CLOSED

I think there's a broader discussion to be had about how to properly manage splunk configs. There are several different ways of doing it (e.g. templating the entire config file, using file_edit, or rolling out a splunk app), and each have their pros and cons.

I tend to favor app bundles for managing .conf files in my own deployments (which I can manage with the splunk_app resource), but I understand that's not the ideal approach for a lot of other folks.

from chef-splunk.

+1 doesn't exist, would be great if it existed. Previous PR to add this was #8 ... and closed due to not having tests :(

from chef-splunk.

I'm reviving an old discussion here, but here goes. At first, it seems logical to have a resource to manage the splunk conf files. I actually implemented this in my team's private cookbook repo (not this one). It involved using the iniparse gem to manage monitors and indexes. The code is not pleasant to look at and was written in the old LWRP style.

from chef-splunk.