From b46c4c5eced4cf94f9ae8ca2abb1429f4d65cc27 Mon Sep 17 00:00:00 2001 From: kashok-splunk <51301856+kashok-splunk@users.noreply.github.com> Date: Fri, 15 Oct 2021 09:49:30 -0700 Subject: [PATCH 1/4] Monitor Bug: MC to install apps when SHC is present (#656) --- .../splunk_monitor/tasks/initialize_standalone_search_head.yml | 3 --- 1 file changed, 3 deletions(-) diff --git a/roles/splunk_monitor/tasks/initialize_standalone_search_head.yml b/roles/splunk_monitor/tasks/initialize_standalone_search_head.yml index c46b1832..4fd79677 100644 --- a/roles/splunk_monitor/tasks/initialize_standalone_search_head.yml +++ b/roles/splunk_monitor/tasks/initialize_standalone_search_head.yml @@ -10,7 +10,6 @@ - include_tasks: ../../../roles/splunk_common/tasks/provision_apps.yml when: - "'apps_location' in splunk and splunk.apps_location" - - not splunk_search_head_cluster | bool - splunk.deployment_server is not defined or not splunk.deployment_server vars: app_list: "{{ splunk.apps_location }}" @@ -18,8 +17,6 @@ - include_tasks: ../../../roles/splunk_common/tasks/provision_apps.yml when: - "'app_paths_install' in splunk and 'default' in splunk.app_paths_install and splunk.app_paths_install.default" - - not splunk_search_head_cluster | bool - - splunk.deployment_server is not defined or not splunk.deployment_server vars: app_list: "{{ splunk.app_paths_install.default }}" From fe9c2280cafb3c6c2f9468ed5dfc4947198ac075 Mon Sep 17 00:00:00 2001 From: vebken-splunk <69484429+vebken-splunk@users.noreply.github.com> Date: Fri, 15 Oct 2021 12:13:19 -0700 Subject: [PATCH 2/4] CSPL-1368 Ensure splunk-ansible gracefully handles ES app upgrades (#655) Currently when attempting to install a new version of ES over an older version of ES through ansible on a SHC deployer or Cluster Manager, the "Run ESS post-install setup" task which is responsible for running the essinstall command will fail. The failure occurs because ansible will disable the SplunkEnterpriseSecurity app on the deployer and cluster manager instances as one of the last steps of the initial install. This means that when the "Run ESS post-install setup" is attempted during the upgrade, the SplunkEnterpriseSecuritySuite app is in the disabled state, and the essinstall command cannot be found and therefore executed. Fix: The simple fix for this is to add one more task to configure_ess.yml to ensure the SplunkEnterpriseSecuritySuite app is enabled prior to attempting to run essinstall. Co-authored-by: Alisha Mayor --- roles/splunk_common/tasks/premium_apps/configure_ess.yml | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/roles/splunk_common/tasks/premium_apps/configure_ess.yml b/roles/splunk_common/tasks/premium_apps/configure_ess.yml index d4179e78..b26e02f2 100644 --- a/roles/splunk_common/tasks/premium_apps/configure_ess.yml +++ b/roles/splunk_common/tasks/premium_apps/configure_ess.yml @@ -1,4 +1,9 @@ --- +- name: Enable SplunkEnterpriseSecuriteSuite app + command: "{{ splunk.exec }} enable app SplunkEnterpriseSecuritySuite -auth {{ splunk.admin_user }}:{{ splunk.password }}" + become: yes + become_user: "{{ splunk.user }}" + - name: Get ESS version uri: url: "{{ cert_prefix }}://127.0.0.1:{{ splunk.svc_port }}/services/apps/local/SplunkEnterpriseSecuritySuite?output_mode=json" From eea1a5fdcfbcf4da75bc901fd44cc26d7477060e Mon Sep 17 00:00:00 2001 From: Jack Meixensperger Date: Wed, 27 Oct 2021 14:40:59 -0700 Subject: [PATCH 3/4] Add retry logic to ess post-install (#657) Co-authored-by: Alisha Mayor --- roles/splunk_common/tasks/premium_apps/configure_ess.yml | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/roles/splunk_common/tasks/premium_apps/configure_ess.yml b/roles/splunk_common/tasks/premium_apps/configure_ess.yml index b26e02f2..2f14cac3 100644 --- a/roles/splunk_common/tasks/premium_apps/configure_ess.yml +++ b/roles/splunk_common/tasks/premium_apps/configure_ess.yml @@ -24,7 +24,8 @@ become: yes become_user: "{{ splunk.user }}" register: essinstall - changed_when: essinstall.rc == 0 - failed_when: essinstall.rc != 0 and 'Unknown search command' not in essinstall.stderr + retries: 10 + delay: 30 + until: essinstall.rc == 0 notify: - Restart the splunkd service From 210a723da5b8db7b94da7803fca1a47320e8ca9b Mon Sep 17 00:00:00 2001 From: Alisha Mayor Date: Mon, 1 Nov 2021 12:14:47 -0700 Subject: [PATCH 4/4] Updating changelog for Release/823 (#659) --- docs/CHANGELOG.md | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/docs/CHANGELOG.md b/docs/CHANGELOG.md index 642e4d7a..88c851a5 100644 --- a/docs/CHANGELOG.md +++ b/docs/CHANGELOG.md @@ -2,6 +2,7 @@ ## Navigation +* [8.2.3](#823) * [8.2.2](#822) * [8.2.1](#821) * [8.2.0](#820) @@ -54,6 +55,13 @@ --- +## 8.2.3 + +#### Changes +* Bugfixes + +--- + ## 8.2.2 #### What's New?