splunk_cluster.template

{
  "AWSTemplateFormatVersion" : "2010-09-09",

  "Description" : "Create splunk cluster of 1 master node, 1 search head and the option of 3, 5 or 9 peer nodes distributed across one or more subnets in a given VPC.",

  "Parameters" : {

    "VpcId" : {
      "Description" : "Vpc ID of your existing Virtual Private Cloud (VPC)",
      "Type" : "String",
      "Default": "vpc-"
    },

    "SubnetIds" : {
      "Description" : "Comma-separated list of existing public subnet IDs in your VPC over which to distributed the nodes - also see SubnetCount parameter",
      "Type" : "CommaDelimitedList",
      "Default" : "subnet-"
    },

    "SubnetCount": {
      "Description": "Number of subnets over which to distribute the nodes; must be between 1 and 3, and must match number of subnets specified in SubnetIds parameter",
      "Type": "Number",
      "MinValue": "1",
      "MaxValue": "3",
      "Default": "1",
      "AllowedValues": [
        "1", "2", "3"
      ]
    },

    "ClusterSize" : {
      "Description" : "Splunk Cluster size or number of peer nodes; must be between 2 and 9",
      "Type" : "Number",
      "MinValue": "2",
      "MaxValue": "9",
      "Default" : "3",
      "AllowedValues": [
        "2", "3", "4", "5", "6", "7", "8", "9"
      ]
    },

    "ClusterSecurityKey" : {
      "Description" : "Security key to authenticate traffic between cluster nodes.",
      "Type" : "String",
      "Default" : "password",
      "AllowedPattern" : "[-_ a-zA-Z0-9]+",
      "ConstraintDescription" : "can contain only alphanumeric characters, spaces, dashes and underscores."
    },

    "InstanceType" : {
      "Description" : "Splunk Server EC2 instance type",
      "Type" : "String",
      "Default" : "t2.micro",
      "AllowedValues" : ["t2.micro", "m3.medium", "m3.large", "m3.xlarge", "m3.2xlarge", "m4.large", "m4.xlarge", "m4.2xlarge", "m4.4xlarge", "m4.10xlarge", "c3.large", "c3.xlarge", "c3.2xlarge", "c3.4xlarge", "c3.8xlarge", "c4.large", "c4.xlarge", "c4.2xlarge", "c4.4xlarge", "c4.8xlarge", "r3.large", "r3.xlarge", "r3.2xlarge", "r3.4xlarge", "r3.8xlarge", "i2.xlarge", "i2.2xlarge", "i2.4xlarge", "i2.8xlarge", "d2.xlarge", "d2.2xlarge", "d2.4xlarge", "d2.8xlarge"],
      "ConstraintDescription" : "must be a valid EC2 instance type."
    },

    "KeyName" : {
      "Description" : "Name of an existing EC2 KeyPair to enable SSH access to the instances",
      "Type" : "String",
      "Default" : "bastion_key",
      "MinLength": "1",
      "MaxLength": "64",
      "AllowedPattern" : "[-_ a-zA-Z0-9]*",
      "ConstraintDescription" : "can contain only alphanumeric characters, spaces, dashes and underscores."
    },

    "CIDRBlock" : {
      "Description": "Restrict incoming data from specified IP range (default can be received from anywhere)",
      "Type": "String",
      "MinLength": "9",
      "MaxLength": "18",
      "Default": "0.0.0.0/0",
      "AllowedPattern": "(\\d{1,3})\\.(\\d{1,3})\\.(\\d{1,3})\\.(\\d{1,3})/(\\d{1,2})",
      "ConstraintDescription": "must be a valid CIDR range of the form x.x.x.x/x."
    },

    "SplunkLicenseBucket" : {
      "Description" : "[Optional] Name of private S3 bucket with licenses to be accessed via authenticated requests",
      "Default": "",
      "Type" : "String"      
    },

    "SplunkLicensePath" : {
      "Type" : "String",
      "Default": "",
      "Description" : "[Optional] Path to license file in S3 Bucket"
    },

    "Subdomain" : {
      "Description" : "[Optional] Subdomain to use for new DNS records for cluster (without trailing dot)",
      "Type" : "String",
      "MinLength": "0",
      "MaxLength": "255",
      "Default": "",
      "AllowedPattern" : "[-_a-zA-Z0-9]*",
      "ConstraintDescription" : "can contain only alphanumeric characters, and dashes and underscores."
    },

    "HostedZoneName" : {
      "Description" : "[Optional] Hosted zone name e.g. 'example.com' (without trailing dot) - Route 53 must be the DNS service for specified domain",
      "Type" : "String",
      "Default": "",
      "AllowedPattern": "^(([a-zA-Z0-9]|[a-zA-Z0-9][-a-zA-Z0-9]*[a-zA-Z0-9])\\.)*([A-Za-z0-9]|[A-Za-z0-9][-A-Za-z0-9]*[A-Za-z0-9])?$",
      "ConstraintDescription": "Must be a valid DNS domain."
    }
  },

  "Mappings" : {

    "AWSRegion2s3Bucket" : {
      "us-east-1" :      { "s3Bucket" : "https://splunk-cloud-us-east-1.s3.amazonaws.com" },
      "us-west-1" :      { "s3Bucket" : "https://splunk-cloud-us-west-1.s3.amazonaws.com" },
      "us-west-2" :      { "s3Bucket" : "https://splunk-cloud-us-west-2.s3.amazonaws.com" },
      "eu-west-1" :      { "s3Bucket" : "https://splunk-cloud-eu-west-1.s3.amazonaws.com" },
      "sa-east-1" :      { "s3Bucket" : "https://splunk-cloud-sa-east-1.s3.amazonaws.com" },
      "ap-northeast-1" : { "s3Bucket" : "https://splunk-cloud-ap-northeast-1.s3.amazonaws.com" },
      "ap-southeast-1" : { "s3Bucket" : "https://splunk-cloud-ap-southeast-1.s3.amazonaws.com" },
      "ap-southeast-2" : { "s3Bucket" : "https://splunk-cloud-ap-southeast-2.s3.amazonaws.com" }
    },

    "SubnetCount2NodeAZDistribution" : {
      "1": { "AZs" : ["0", "0", "0", "0", "0", "0", "0", "0", "0"] },
      "2": { "AZs" : ["0", "1", "0", "1", "0", "1", "0", "1", "0"] },
      "3": { "AZs" : ["0", "1", "2", "0", "1", "2", "0", "1", "2"] }
    }
  },

  "Conditions" : {
    "SubdomainEmpty" : { "Fn::Equals" : [{ "Ref": "Subdomain" }, ""]},
    "SkipLicenseMaster" : { "Fn::Equals" : [{ "Ref": "SplunkLicensePath" }, ""]},
    "AddLicenseMaster" : { "Fn::Not" : [
      { "Condition" : "SkipLicenseMaster" }
    ]},
    "AddDNSRecords" : { "Fn::Not" : [
      { "Fn::Equals" : [{ "Ref": "HostedZoneName" }, ""]}
    ]},
    "CreatePeerNode09": { "Fn::Equals" : [ "9", { "Ref": "ClusterSize" } ] },
    "CreatePeerNode08": { "Fn::Or" : [
      { "Fn::Equals" : [ "8", { "Ref": "ClusterSize" } ] },
      { "Condition" : "CreatePeerNode09" }
    ]},
    "CreatePeerNode07": { "Fn::Or" : [
      { "Fn::Equals" : [ "7", { "Ref": "ClusterSize" } ] },
      { "Condition" : "CreatePeerNode08" }
    ]},
    "CreatePeerNode06": { "Fn::Or" : [
      { "Fn::Equals" : [ "6", { "Ref": "ClusterSize" } ] },
      { "Condition" : "CreatePeerNode07" }
    ]},
    "CreatePeerNode05": { "Fn::Or" : [
      { "Fn::Equals" : [ "5", { "Ref": "ClusterSize" } ] },
      { "Condition" : "CreatePeerNode06" }
    ]},
    "CreatePeerNode04": { "Fn::Or" : [
      { "Fn::Equals" : [ "4", { "Ref": "ClusterSize" } ] },
      { "Condition" : "CreatePeerNode05" }
    ]},
    "CreatePeerNode03": { "Fn::Or" : [
      { "Fn::Equals" : [ "3", { "Ref": "ClusterSize" } ] },
      { "Condition" : "CreatePeerNode04" }
    ]}
  },

  "Resources" : {

    "SplunkClusterMasterSecurityGroup" : {
      "Type" : "AWS::EC2::SecurityGroup",
      "Properties" : {
        "VpcId" : { "Ref" : "VpcId" },
        "GroupDescription" : "Enable internal access for SSH, and Splunk management, and allow public HTTP/HTTPS access to Splunk web",
        "SecurityGroupIngress" : [
          { "IpProtocol" : "tcp", "FromPort" : "22", "ToPort" : "22", "CidrIp" : "192.168.0.0/16" },
          { "IpProtocol" : "tcp", "FromPort" : "8089", "ToPort" : "8089", "CidrIp" : "192.168.0.0/16" },
          { "IpProtocol" : "tcp", "FromPort" : "80", "ToPort" : "80", "CidrIp" : "0.0.0.0/0" },
          { "IpProtocol" : "tcp", "FromPort" : "443", "ToPort" : "443", "CidrIp" : "0.0.0.0/0" }
        ]
      }
    },

    "SplunkSearchHeadSecurityGroup" : {
      "Type" : "AWS::EC2::SecurityGroup",
      "Properties" : {
        "VpcId" : { "Ref" : "VpcId" },
        "GroupDescription" : "Enable internal access for SSH and Splunk management, and allow public HTTP/HTTPS access to Splunk web",
        "SecurityGroupIngress" : [
          { "IpProtocol" : "tcp", "FromPort" : "22", "ToPort" : "22", "CidrIp" : "192.168.0.0/16" },
          { "IpProtocol" : "tcp", "FromPort" : "8089", "ToPort" : "8089", "CidrIp" : "192.168.0.0/16" },
          { "IpProtocol" : "tcp", "FromPort" : "80", "ToPort" : "80", "CidrIp" : "0.0.0.0/0" },
          { "IpProtocol" : "tcp", "FromPort" : "443", "ToPort" : "443", "CidrIp" : "0.0.0.0/0" }
        ]
      }
    },

    "SplunkIndexerSecurityGroup" : {
      "Type" : "AWS::EC2::SecurityGroup",
      "Properties" : {
        "VpcId" : { "Ref" : "VpcId" },
        "GroupDescription" : "Enable internal access for SSH and Splunk management/replication, and restrict public access to Splunk receiver",
        "SecurityGroupIngress" : [
          { "IpProtocol" : "tcp", "FromPort" : "22", "ToPort" : "22", "CidrIp" : "192.168.0.0/16" },
          { "IpProtocol" : "tcp", "FromPort" : "8089", "ToPort" : "8089", "CidrIp" : "192.168.0.0/16" },
          { "IpProtocol" : "tcp", "FromPort" : "9887", "ToPort" : "9887", "CidrIp" : "192.168.0.0/16" },
          { "IpProtocol" : "tcp", "FromPort" : "9997", "ToPort" : "9997", "CidrIp" : { "Ref" : "CIDRBlock"} }
        ]
      }
    },

    "MasterNode" : {
      "Type" : "AWS::CloudFormation::Stack",
      "Condition": "AddLicenseMaster",
      "Metadata" : {
        "Comment" : "Splunk cluster master node + license master."
      },
      "Properties" : {
        "TemplateURL" : { "Fn::Join" : ["/", [{ "Fn::FindInMap" : [ "AWSRegion2s3Bucket", { "Ref" : "AWS::Region" }, "s3Bucket" ]},
                          "cloudformation-templates", "splunk_server.template" ]]},
        "Parameters" : {
          "VpcId"          : { "Ref" : "VpcId" },
          "SubnetId"       : { "Fn::Select" : [ "0", { "Ref" : "SubnetIds" } ] },
          "InstanceType"   : { "Ref" : "InstanceType" },
          "KeyName"        : { "Ref" : "KeyName" },
          "SecurityGroup"  : { "Ref" : "SplunkClusterMasterSecurityGroup" },
          "ClusterSecurityKey" : { "Ref" : "ClusterSecurityKey" },
          "SplunkLicenseBucket" : { "Ref" : "SplunkLicenseBucket" },
          "SplunkLicensePath" : { "Ref" : "SplunkLicensePath" },
          "SplunkRole"     : "cluster-master",
          "ResourceName"   : "MasterNode"
        }
      }
    },

    "MasterNode" : {
      "Type" : "AWS::CloudFormation::Stack",
      "Condition": "SkipLicenseMaster",
      "Metadata" : {
        "Comment" : "Splunk cluster master node."
      },
      "Properties" : {
        "TemplateURL" : { "Fn::Join" : ["/", [{ "Fn::FindInMap" : [ "AWSRegion2s3Bucket", { "Ref" : "AWS::Region" }, "s3Bucket" ]},
                          "cloudformation-templates", "splunk_server.template" ]]},
        "Parameters" : {
          "VpcId"          : { "Ref" : "VpcId" },
          "SubnetId"       : { "Fn::Select" : [ "0", { "Ref" : "SubnetIds" } ] },
          "InstanceType"   : { "Ref" : "InstanceType" },
          "KeyName"        : { "Ref" : "KeyName" },
          "SecurityGroup"  : { "Ref" : "SplunkClusterMasterSecurityGroup" },
          "ClusterSecurityKey" : { "Ref" : "ClusterSecurityKey" },
          "SplunkRole"     : "cluster-master",
          "ResourceName"   : "MasterNode"
        }
      }
    },

    "SearchHead" : {
      "Type" : "AWS::CloudFormation::Stack",
      "Metadata" : {
        "Comment" : "Splunk cluster search head."
      },
      "Properties" : {
        "TemplateURL" : { "Fn::Join" : ["/", [{ "Fn::FindInMap" : [ "AWSRegion2s3Bucket", { "Ref" : "AWS::Region" }, "s3Bucket" ]},
                          "cloudformation-templates", "splunk_server.template" ]]},
        "Parameters" : {
          "VpcId"          : { "Ref" : "VpcId" },
          "SubnetId"       : { "Fn::Select" : [ "0", { "Ref" : "SubnetIds" } ] },
          "InstanceType"   : { "Ref" : "InstanceType" },
          "KeyName"        : { "Ref" : "KeyName" },
          "SecurityGroup"  : { "Ref" : "SplunkSearchHeadSecurityGroup" },
          "ClusterSecurityKey" : { "Ref" : "ClusterSecurityKey" },
          "ClusterMasterIP"   : { "Fn::If" : [
            "AddDNSRecords",
            { "Fn::Join" : [ "", [
              "cm", ".", "int", ".",
              {"Ref" : "Subdomain"},
              {"Fn::If" : [ "SubdomainEmpty", "", "." ]},
              {"Ref" : "HostedZoneName"}
            ] ] },
            { "Fn::GetAtt" : [ "MasterNode", "Outputs.PrivateIp" ] }
          ]},
          "SplunkRole"     : "cluster-search-head",
          "ResourceName"   : "SearchHead"
        }
      }
    },

    "PeerNode01" : {
      "Type" : "AWS::CloudFormation::Stack",
      "Metadata" : {
        "Comment" : "Splunk cluster peer node 1."
      },
      "Properties" : {
        "TemplateURL" : { "Fn::Join" : ["/", [{ "Fn::FindInMap" : [ "AWSRegion2s3Bucket", { "Ref" : "AWS::Region" }, "s3Bucket" ]},
                          "cloudformation-templates", "splunk_server.template" ]]},
        "Parameters" : {
          "VpcId"          : { "Ref" : "VpcId" },
          "SubnetId"       : { "Fn::Select" : [
            { "Fn::Select" : [
              "0",
              { "Fn::FindInMap" : [ "SubnetCount2NodeAZDistribution", { "Ref" : "SubnetCount" }, "AZs" ] }
            ] },
            { "Ref" : "SubnetIds" }
          ] },
          "InstanceType"   : { "Ref" : "InstanceType" },
          "KeyName"        : { "Ref" : "KeyName" },
          "SecurityGroup"  : { "Ref" : "SplunkIndexerSecurityGroup" },
          "ClusterSecurityKey" : { "Ref" : "ClusterSecurityKey" },
          "ClusterMasterIP"   : { "Fn::If" : [
            "AddDNSRecords",
            { "Fn::Join" : [ "", [
              "cm", ".", "int", ".",
              {"Ref" : "Subdomain"},
              {"Fn::If" : [ "SubdomainEmpty", "", "." ]},
              {"Ref" : "HostedZoneName"}
            ] ] },
            { "Fn::GetAtt" : [ "MasterNode", "Outputs.PrivateIp" ] }
          ]},
          "SplunkRole"     : "cluster-peer",
          "ResourceName"   : "PeerNode01"
        }
      }
    },

    "PeerNode02" : {
      "Type" : "AWS::CloudFormation::Stack",
      "Metadata" : {
        "Comment" : "Splunk cluster peer node 2."
      },
      "Properties" : {
        "TemplateURL" : { "Fn::Join" : ["/", [{ "Fn::FindInMap" : [ "AWSRegion2s3Bucket", { "Ref" : "AWS::Region" }, "s3Bucket" ]},
                          "cloudformation-templates", "splunk_server.template" ]]},
        "Parameters" : {
          "VpcId"          : { "Ref" : "VpcId" },
          "SubnetId"       : { "Fn::Select" : [
            { "Fn::Select" : [
              "1",
              { "Fn::FindInMap" : [ "SubnetCount2NodeAZDistribution", { "Ref" : "SubnetCount" }, "AZs" ] }
            ] },
            { "Ref" : "SubnetIds" }
          ] },
          "InstanceType"   : { "Ref" : "InstanceType" },
          "KeyName"        : { "Ref" : "KeyName" },
          "SecurityGroup"  : { "Ref" : "SplunkIndexerSecurityGroup" },
          "ClusterSecurityKey" : { "Ref" : "ClusterSecurityKey" },
          "ClusterMasterIP"   : { "Fn::If" : [
            "AddDNSRecords",
            { "Fn::Join" : [ "", [
              "cm", ".", "int", ".",
              {"Ref" : "Subdomain"},
              {"Fn::If" : [ "SubdomainEmpty", "", "." ]},
              {"Ref" : "HostedZoneName"}
            ] ] },
            { "Fn::GetAtt" : [ "MasterNode", "Outputs.PrivateIp" ] }
          ]},
          "SplunkRole"     : "cluster-peer",
          "ResourceName"   : "PeerNode02"
        }
      }
    },

    "PeerNode03" : {
      "Type" : "AWS::CloudFormation::Stack",
      "Condition": "CreatePeerNode03",
      "Metadata" : {
        "Comment" : "Splunk cluster peer node 3."
      },
      "Properties" : {
        "TemplateURL" : { "Fn::Join" : ["/", [{ "Fn::FindInMap" : [ "AWSRegion2s3Bucket", { "Ref" : "AWS::Region" }, "s3Bucket" ]},
                          "cloudformation-templates", "splunk_server.template" ]]},
        "Parameters" : {
          "VpcId"          : { "Ref" : "VpcId" },
          "SubnetId"       : { "Fn::Select" : [
            { "Fn::Select" : [
              "2",
              { "Fn::FindInMap" : [ "SubnetCount2NodeAZDistribution", { "Ref" : "SubnetCount" }, "AZs" ] }
            ] },
            { "Ref" : "SubnetIds" }
          ] },
          "InstanceType"   : { "Ref" : "InstanceType" },
          "KeyName"        : { "Ref" : "KeyName" },
          "SecurityGroup"  : { "Ref" : "SplunkIndexerSecurityGroup" },
          "ClusterSecurityKey" : { "Ref" : "ClusterSecurityKey" },
          "ClusterMasterIP"   : { "Fn::If" : [
            "AddDNSRecords",
            { "Fn::Join" : [ "", [
              "cm", ".", "int", ".",
              {"Ref" : "Subdomain"},
              {"Fn::If" : [ "SubdomainEmpty", "", "." ]},
              {"Ref" : "HostedZoneName"}
            ] ] },
            { "Fn::GetAtt" : [ "MasterNode", "Outputs.PrivateIp" ] }
          ]},
          "SplunkRole"     : "cluster-peer",
          "ResourceName"   : "PeerNode03"
        }
      }
    },

    "PeerNode04" : {
      "Type" : "AWS::CloudFormation::Stack",
      "Condition": "CreatePeerNode04",
      "Metadata" : {
        "Comment" : "Splunk cluster peer node 4."
      },
      "Properties" : {
        "TemplateURL" : { "Fn::Join" : ["/", [{ "Fn::FindInMap" : [ "AWSRegion2s3Bucket", { "Ref" : "AWS::Region" }, "s3Bucket" ]},
                          "cloudformation-templates", "splunk_server.template" ]]},
        "Parameters" : {
          "VpcId"          : { "Ref" : "VpcId" },
          "SubnetId"       : { "Fn::Select" : [
            { "Fn::Select" : [
              "3",
              { "Fn::FindInMap" : [ "SubnetCount2NodeAZDistribution", { "Ref" : "SubnetCount" }, "AZs" ] }
            ] },
            { "Ref" : "SubnetIds" }
          ] },
          "InstanceType"   : { "Ref" : "InstanceType" },
          "KeyName"        : { "Ref" : "KeyName" },
          "SecurityGroup"  : { "Ref" : "SplunkIndexerSecurityGroup" },
          "ClusterSecurityKey" : { "Ref" : "ClusterSecurityKey" },
          "ClusterMasterIP"   : { "Fn::If" : [
            "AddDNSRecords",
            { "Fn::Join" : [ "", [
              "cm", ".", "int", ".",
              {"Ref" : "Subdomain"},
              {"Fn::If" : [ "SubdomainEmpty", "", "." ]},
              {"Ref" : "HostedZoneName"}
            ] ] },
            { "Fn::GetAtt" : [ "MasterNode", "Outputs.PrivateIp" ] }
          ]},
          "SplunkRole"     : "cluster-peer",
          "ResourceName"   : "PeerNode04"
        }
      }
    },

    "PeerNode05" : {
      "Type" : "AWS::CloudFormation::Stack",
      "Condition": "CreatePeerNode05",
      "Metadata" : {
        "Comment" : "Splunk cluster peer node 5."
      },
      "Properties" : {
        "TemplateURL" : { "Fn::Join" : ["/", [{ "Fn::FindInMap" : [ "AWSRegion2s3Bucket", { "Ref" : "AWS::Region" }, "s3Bucket" ]},
                          "cloudformation-templates", "splunk_server.template" ]]},
        "Parameters" : {
          "VpcId"          : { "Ref" : "VpcId" },
          "SubnetId"       : { "Fn::Select" : [
            { "Fn::Select" : [
              "4",
              { "Fn::FindInMap" : [ "SubnetCount2NodeAZDistribution", { "Ref" : "SubnetCount" }, "AZs" ] }
            ] },
            { "Ref" : "SubnetIds" }
          ] },
          "InstanceType"   : { "Ref" : "InstanceType" },
          "KeyName"        : { "Ref" : "KeyName" },
          "SecurityGroup"  : { "Ref" : "SplunkIndexerSecurityGroup" },
          "ClusterSecurityKey" : { "Ref" : "ClusterSecurityKey" },
          "ClusterMasterIP"   : { "Fn::If" : [
            "AddDNSRecords",
            { "Fn::Join" : [ "", [
              "cm", ".", "int", ".",
              {"Ref" : "Subdomain"},
              {"Fn::If" : [ "SubdomainEmpty", "", "." ]},
              {"Ref" : "HostedZoneName"}
            ] ] },
            { "Fn::GetAtt" : [ "MasterNode", "Outputs.PrivateIp" ] }
          ]},
          "SplunkRole"     : "cluster-peer",
          "ResourceName"   : "PeerNode05"
        }
      }
    },

    "PeerNode06" : {
      "Type" : "AWS::CloudFormation::Stack",
      "Condition": "CreatePeerNode06",
      "Metadata" : {
        "Comment" : "Splunk cluster peer node 6."
      },
      "Properties" : {
        "TemplateURL" : { "Fn::Join" : ["/", [{ "Fn::FindInMap" : [ "AWSRegion2s3Bucket", { "Ref" : "AWS::Region" }, "s3Bucket" ]},
                          "cloudformation-templates", "splunk_server.template" ]]},
        "Parameters" : {
          "VpcId"          : { "Ref" : "VpcId" },
          "SubnetId"       : { "Fn::Select" : [
            { "Fn::Select" : [
              "5",
              { "Fn::FindInMap" : [ "SubnetCount2NodeAZDistribution", { "Ref" : "SubnetCount" }, "AZs" ] }
            ] },
            { "Ref" : "SubnetIds" }
          ] },
          "InstanceType"   : { "Ref" : "InstanceType" },
          "KeyName"        : { "Ref" : "KeyName" },
          "SecurityGroup"  : { "Ref" : "SplunkIndexerSecurityGroup" },
          "ClusterSecurityKey" : { "Ref" : "ClusterSecurityKey" },
          "ClusterMasterIP"   : { "Fn::If" : [
            "AddDNSRecords",
            { "Fn::Join" : [ "", [
              "cm", ".", "int", ".",
              {"Ref" : "Subdomain"},
              {"Fn::If" : [ "SubdomainEmpty", "", "." ]},
              {"Ref" : "HostedZoneName"}
            ] ] },
            { "Fn::GetAtt" : [ "MasterNode", "Outputs.PrivateIp" ] }
          ]},
          "SplunkRole"     : "cluster-peer",
          "ResourceName"   : "PeerNode06"
        }
      }
    },

    "PeerNode07" : {
      "Type" : "AWS::CloudFormation::Stack",
      "Condition": "CreatePeerNode07",
      "Metadata" : {
        "Comment" : "Splunk cluster peer node 7."
      },
      "Properties" : {
        "TemplateURL" : { "Fn::Join" : ["/", [{ "Fn::FindInMap" : [ "AWSRegion2s3Bucket", { "Ref" : "AWS::Region" }, "s3Bucket" ]},
                          "cloudformation-templates", "splunk_server.template" ]]},
        "Parameters" : {
          "VpcId"          : { "Ref" : "VpcId" },
          "SubnetId"       : { "Fn::Select" : [
            { "Fn::Select" : [
              "6",
              { "Fn::FindInMap" : [ "SubnetCount2NodeAZDistribution", { "Ref" : "SubnetCount" }, "AZs" ] }
            ] },
            { "Ref" : "SubnetIds" }
          ] },
          "InstanceType"   : { "Ref" : "InstanceType" },
          "KeyName"        : { "Ref" : "KeyName" },
          "SecurityGroup"  : { "Ref" : "SplunkIndexerSecurityGroup" },
          "ClusterSecurityKey" : { "Ref" : "ClusterSecurityKey" },
          "ClusterMasterIP"   : { "Fn::If" : [
            "AddDNSRecords",
            { "Fn::Join" : [ "", [
              "cm", ".", "int", ".",
              {"Ref" : "Subdomain"},
              {"Fn::If" : [ "SubdomainEmpty", "", "." ]},
              {"Ref" : "HostedZoneName"}
            ] ] },
            { "Fn::GetAtt" : [ "MasterNode", "Outputs.PrivateIp" ] }
          ]},
          "SplunkRole"     : "cluster-peer",
          "ResourceName"   : "PeerNode07"
        }
      }
    },

    "PeerNode08" : {
      "Type" : "AWS::CloudFormation::Stack",
      "Condition": "CreatePeerNode08",
      "Metadata" : {
        "Comment" : "Splunk cluster peer node 8."
      },
      "Properties" : {
        "TemplateURL" : { "Fn::Join" : ["/", [{ "Fn::FindInMap" : [ "AWSRegion2s3Bucket", { "Ref" : "AWS::Region" }, "s3Bucket" ]},
                          "cloudformation-templates", "splunk_server.template" ]]},
        "Parameters" : {
          "VpcId"          : { "Ref" : "VpcId" },
          "SubnetId"       : { "Fn::Select" : [
            { "Fn::Select" : [
              "7",
              { "Fn::FindInMap" : [ "SubnetCount2NodeAZDistribution", { "Ref" : "SubnetCount" }, "AZs" ] }
            ] },
            { "Ref" : "SubnetIds" }
          ] },
          "InstanceType"   : { "Ref" : "InstanceType" },
          "KeyName"        : { "Ref" : "KeyName" },
          "SecurityGroup"  : { "Ref" : "SplunkIndexerSecurityGroup" },
          "ClusterSecurityKey" : { "Ref" : "ClusterSecurityKey" },
          "ClusterMasterIP"   : { "Fn::If" : [
            "AddDNSRecords",
            { "Fn::Join" : [ "", [
              "cm", ".", "int", ".",
              {"Ref" : "Subdomain"},
              {"Fn::If" : [ "SubdomainEmpty", "", "." ]},
              {"Ref" : "HostedZoneName"}
            ] ] },
            { "Fn::GetAtt" : [ "MasterNode", "Outputs.PrivateIp" ] }
          ]},
          "SplunkRole"     : "cluster-peer",
          "ResourceName"   : "PeerNode08"
        }
      }
    },

    "PeerNode09" : {
      "Type" : "AWS::CloudFormation::Stack",
      "Condition": "CreatePeerNode09",
      "Metadata" : {
        "Comment" : "Splunk cluster peer node 9."
      },
      "Properties" : {
        "TemplateURL" : { "Fn::Join" : ["/", [{ "Fn::FindInMap" : [ "AWSRegion2s3Bucket", { "Ref" : "AWS::Region" }, "s3Bucket" ]},
                          "cloudformation-templates", "splunk_server.template" ]]},
        "Parameters" : {
          "VpcId"          : { "Ref" : "VpcId" },
          "SubnetId"       : { "Fn::Select" : [
            { "Fn::Select" : [
              "8",
              { "Fn::FindInMap" : [ "SubnetCount2NodeAZDistribution", { "Ref" : "SubnetCount" }, "AZs" ] }
            ] },
            { "Ref" : "SubnetIds" }
          ] },
          "InstanceType"   : { "Ref" : "InstanceType" },
          "KeyName"        : { "Ref" : "KeyName" },
          "SecurityGroup"  : { "Ref" : "SplunkIndexerSecurityGroup" },
          "ClusterSecurityKey" : { "Ref" : "ClusterSecurityKey" },
          "ClusterMasterIP"   : { "Fn::If" : [
            "AddDNSRecords",
            { "Fn::Join" : [ "", [
              "cm", ".", "int", ".",
              {"Ref" : "Subdomain"},
              {"Fn::If" : [ "SubdomainEmpty", "", "." ]},
              {"Ref" : "HostedZoneName"}
            ] ] },
            { "Fn::GetAtt" : [ "MasterNode", "Outputs.PrivateIp" ] }
          ]},
          "SplunkRole"     : "cluster-peer",
          "ResourceName"   : "PeerNode09"
        }
      }
    },

    "MasterNodeInternalDNSRecord" : {
      "Type" : "AWS::Route53::RecordSet",
      "Condition": "AddDNSRecords",
      "Properties" : {
        "HostedZoneName" : {
          "Fn::Join" : [ "", [
            {"Ref" : "HostedZoneName"}, "."
          ] ]
        },
        "Comment" : "Private DNS name for Cluster Master.",
        "Name" : {
          "Fn::Join" : [ "", [
            "cm", ".", "int", ".",
            {"Ref" : "Subdomain"},
            {"Fn::If" : [ "SubdomainEmpty", "", "." ]},
            {"Ref" : "HostedZoneName"},
            "."
          ] ]
        },
        "Type" : "CNAME",
        "TTL" : "60",
        "ResourceRecords" : [
          { "Fn::GetAtt" : [ "MasterNode", "Outputs.PrivateDnsName" ] }
        ]
      }
    },

    "SearchHeadInternalDNSRecord" : {
      "Type" : "AWS::Route53::RecordSet",
      "Condition": "AddDNSRecords",
      "Properties" : {
        "HostedZoneName" : {
          "Fn::Join" : [ "", [
            {"Ref" : "HostedZoneName"}, "."
          ] ]
        },
        "Comment" : "Private DNS name for Search Head.",
        "Name" : {
          "Fn::Join" : [ "", [
            "sh", ".", "int", ".",
            {"Ref" : "Subdomain"},
            {"Fn::If" : [ "SubdomainEmpty", "", "." ]},
            {"Ref" : "HostedZoneName"},
            "."
          ] ]
        },
        "Type" : "CNAME",
        "TTL" : "60",
        "ResourceRecords" : [
          { "Fn::GetAtt" : [ "SearchHead", "Outputs.PrivateDnsName" ] }
        ]
      }
    },

    "MasterNodeDNSRecord" : {
      "Type" : "AWS::Route53::RecordSet",
      "Condition": "AddDNSRecords",
      "Properties" : {
        "HostedZoneName" : {
          "Fn::Join" : [ "", [
            {"Ref" : "HostedZoneName"}, "."
          ] ]
        },
        "Comment" : "DNS name for Cluster Master.",
        "Name" : {
          "Fn::Join" : [ "", [
            "cm", ".",
            {"Ref" : "Subdomain"},
            {"Fn::If" : [ "SubdomainEmpty", "", "." ]},
            {"Ref" : "HostedZoneName"},
            "."
          ] ]
        },
        "Type" : "A",
        "TTL" : "60",
        "ResourceRecords" : [
          { "Fn::GetAtt" : [ "MasterNode", "Outputs.PublicIp" ] }
        ]
      }
    },

    "SearchHeadDNSRecord" : {
      "Type" : "AWS::Route53::RecordSet",
      "Condition": "AddDNSRecords",
      "Properties" : {
        "HostedZoneName" : {
          "Fn::Join" : [ "", [
            {"Ref" : "HostedZoneName"}, "."
          ] ]
        },
        "Comment" : "DNS name for Search Head.",
        "Name" : {
          "Fn::Join" : [ "", [
            "sh", ".",
            {"Ref" : "Subdomain"},
            {"Fn::If" : [ "SubdomainEmpty", "", "." ]},
            {"Ref" : "HostedZoneName"},
            "."
          ] ]
        },
        "Type" : "A",
        "TTL" : "60",
        "ResourceRecords" : [
          { "Fn::GetAtt" : [ "SearchHead", "Outputs.PublicIp" ] }
        ]
      }
    },

    "PeerNodesDNSRecord" : {
      "Type" : "AWS::Route53::RecordSet",
      "Condition": "AddDNSRecords",
      "Properties" : {
        "HostedZoneName" : {
          "Fn::Join" : [ "", [
            {"Ref" : "HostedZoneName"}, "."
          ] ]
        },
        "Comment" : "DNS name for Splunk indexers.",
        "Name" : {
          "Fn::Join" : [ "", [
            "peers", ".",
            {"Ref" : "Subdomain"},
            {"Fn::If" : [ "SubdomainEmpty", "", "." ]},
            {"Ref" : "HostedZoneName"},
            "."
          ] ]
        },
        "Type" : "A",
        "TTL" : "60",
        "ResourceRecords" : { "Fn::If" : [
          "CreatePeerNode09", [
            { "Fn::GetAtt" : [ "PeerNode01", "Outputs.PublicIp" ] },
            { "Fn::GetAtt" : [ "PeerNode02", "Outputs.PublicIp" ] },
            { "Fn::GetAtt" : [ "PeerNode03", "Outputs.PublicIp" ] },
            { "Fn::GetAtt" : [ "PeerNode04", "Outputs.PublicIp" ] },
            { "Fn::GetAtt" : [ "PeerNode05", "Outputs.PublicIp" ] },
            { "Fn::GetAtt" : [ "PeerNode06", "Outputs.PublicIp" ] },
            { "Fn::GetAtt" : [ "PeerNode07", "Outputs.PublicIp" ] },
            { "Fn::GetAtt" : [ "PeerNode08", "Outputs.PublicIp" ] },
            { "Fn::GetAtt" : [ "PeerNode09", "Outputs.PublicIp" ] }
          ],
          { "Fn::If" : [
            "CreatePeerNode08", [
              { "Fn::GetAtt" : [ "PeerNode01", "Outputs.PublicIp" ] },
              { "Fn::GetAtt" : [ "PeerNode02", "Outputs.PublicIp" ] },
              { "Fn::GetAtt" : [ "PeerNode03", "Outputs.PublicIp" ] },
              { "Fn::GetAtt" : [ "PeerNode04", "Outputs.PublicIp" ] },
              { "Fn::GetAtt" : [ "PeerNode05", "Outputs.PublicIp" ] },
              { "Fn::GetAtt" : [ "PeerNode06", "Outputs.PublicIp" ] },
              { "Fn::GetAtt" : [ "PeerNode07", "Outputs.PublicIp" ] },
              { "Fn::GetAtt" : [ "PeerNode08", "Outputs.PublicIp" ] }
            ],
            { "Fn::If" : [
              "CreatePeerNode07", [
                { "Fn::GetAtt" : [ "PeerNode01", "Outputs.PublicIp" ] },
                { "Fn::GetAtt" : [ "PeerNode02", "Outputs.PublicIp" ] },
                { "Fn::GetAtt" : [ "PeerNode03", "Outputs.PublicIp" ] },
                { "Fn::GetAtt" : [ "PeerNode04", "Outputs.PublicIp" ] },
                { "Fn::GetAtt" : [ "PeerNode05", "Outputs.PublicIp" ] },
                { "Fn::GetAtt" : [ "PeerNode06", "Outputs.PublicIp" ] },
                { "Fn::GetAtt" : [ "PeerNode07", "Outputs.PublicIp" ] }
              ],
              { "Fn::If" : [
                "CreatePeerNode06", [
                  { "Fn::GetAtt" : [ "PeerNode01", "Outputs.PublicIp" ] },
                  { "Fn::GetAtt" : [ "PeerNode02", "Outputs.PublicIp" ] },
                  { "Fn::GetAtt" : [ "PeerNode03", "Outputs.PublicIp" ] },
                  { "Fn::GetAtt" : [ "PeerNode04", "Outputs.PublicIp" ] },
                  { "Fn::GetAtt" : [ "PeerNode05", "Outputs.PublicIp" ] },
                  { "Fn::GetAtt" : [ "PeerNode06", "Outputs.PublicIp" ] }
                ],
                { "Fn::If" : [
                  "CreatePeerNode05", [
                    { "Fn::GetAtt" : [ "PeerNode01", "Outputs.PublicIp" ] },
                    { "Fn::GetAtt" : [ "PeerNode02", "Outputs.PublicIp" ] },
                    { "Fn::GetAtt" : [ "PeerNode03", "Outputs.PublicIp" ] },
                    { "Fn::GetAtt" : [ "PeerNode04", "Outputs.PublicIp" ] },
                    { "Fn::GetAtt" : [ "PeerNode05", "Outputs.PublicIp" ] }
                  ],
                  { "Fn::If" : [
                    "CreatePeerNode04", [
                      { "Fn::GetAtt" : [ "PeerNode01", "Outputs.PublicIp" ] },
                      { "Fn::GetAtt" : [ "PeerNode02", "Outputs.PublicIp" ] },
                      { "Fn::GetAtt" : [ "PeerNode03", "Outputs.PublicIp" ] },
                      { "Fn::GetAtt" : [ "PeerNode04", "Outputs.PublicIp" ] }
                    ],
                    { "Fn::If" : [
                      "CreatePeerNode03", [
                        { "Fn::GetAtt" : [ "PeerNode01", "Outputs.PublicIp" ] },
                        { "Fn::GetAtt" : [ "PeerNode02", "Outputs.PublicIp" ] },
                        { "Fn::GetAtt" : [ "PeerNode03", "Outputs.PublicIp" ] }
                      ], [
                        { "Fn::GetAtt" : [ "PeerNode01", "Outputs.PublicIp" ] },
                        { "Fn::GetAtt" : [ "PeerNode02", "Outputs.PublicIp" ] }
                      ]
                    ] }
                  ] }
                ] }
              ] }
            ] }
          ] }
        ] }
      }
    }
  },

  "Outputs" : {
    "MasterNodeURL" : {
      "Condition": "AddDNSRecords",
      "Value" : { "Fn::Join" : [ "", [
        "http://",
        {"Ref" : "MasterNodeDNSRecord"}
      ]]},
      "Description" : "Splunk URL of cluster master"
    },

    "MasterNodeIpAddress" : {
      "Value" : { "Fn::GetAtt" : [ "MasterNode", "Outputs.PublicIp" ] },
      "Description" : "Public IP address of cluster master"
    },

    "SearchHeadURL" : {
      "Condition": "AddDNSRecords",
      "Value" : { "Fn::Join" : [ "", [
        "http://",
        {"Ref" : "SearchHeadDNSRecord"}
      ]]},
      "Description" : "Splunk URL of cluster search head"
    },

    "SearchHeadIpAddress" : {
      "Value" : { "Fn::GetAtt" : [ "SearchHead", "Outputs.PublicIp" ] },
      "Description" : "Public IP address of cluster search head"
    },

    "PeerNodesURL" : {
      "Condition": "AddDNSRecords",
      "Value" : { "Fn::Join" : [ "", [
        {"Ref" : "PeerNodesDNSRecord"},
        ":9997"
      ]]},
      "Description" : "Indexer tier address to forward data to"
    },

    "PeerNodesIpAddresses" : {
      "Value" : { "Fn::Join" : [ "", [
        { "Fn::GetAtt" : [ "PeerNode01", "Outputs.PublicIp" ] },
        { "Fn::Join" : [",", [ "", { "Fn::GetAtt" : [ "PeerNode02", "Outputs.PublicIp" ] } ] ] },
        { "Fn::If" : [ "CreatePeerNode03", {
          "Fn::Join" : [",", [ "", { "Fn::GetAtt" : [ "PeerNode03", "Outputs.PublicIp" ] } ] ] }, "" ] },
        { "Fn::If" : [ "CreatePeerNode04", {
          "Fn::Join" : [",", [ "", { "Fn::GetAtt" : [ "PeerNode04", "Outputs.PublicIp" ] } ] ] }, "" ] },
        { "Fn::If" : [ "CreatePeerNode05", {
          "Fn::Join" : [",", [ "", { "Fn::GetAtt" : [ "PeerNode05", "Outputs.PublicIp" ] } ] ] }, "" ] },
        { "Fn::If" : [ "CreatePeerNode06", {
          "Fn::Join" : [",", [ "", { "Fn::GetAtt" : [ "PeerNode06", "Outputs.PublicIp" ] } ] ] }, "" ] },
        { "Fn::If" : [ "CreatePeerNode07", {
          "Fn::Join" : [",", [ "", { "Fn::GetAtt" : [ "PeerNode07", "Outputs.PublicIp" ] } ] ] }, "" ] },
        { "Fn::If" : [ "CreatePeerNode08", {
          "Fn::Join" : [",", [ "", { "Fn::GetAtt" : [ "PeerNode08", "Outputs.PublicIp" ] } ] ] }, "" ] },
        { "Fn::If" : [ "CreatePeerNode09", {
          "Fn::Join" : [",", [ "", { "Fn::GetAtt" : [ "PeerNode09", "Outputs.PublicIp" ] } ] ] }, "" ] }
      ]]},
      "Description" : "List of public IP address of all cluster peer nodes"
    }
  }
}