Merge pull request #950 from splunk-james/develop

Update outputs.conf.j2 for splunk_byo_ip and also fixed linux powershell profile for ART
splunk · Oct 7, 2024 · a5dd385 · a5dd385
2 parents 9c5c4e1 + 1442816
commit a5dd385
Show file tree

Hide file tree

Showing 3 changed files with 16 additions and 2 deletions.
diff --git a/terraform/ansible/roles/linux_install_art/files/Microsoft.PowerShell_profile.ps1 b/terraform/ansible/roles/linux_install_art/files/Microsoft.PowerShell_profile.ps1
@@ -0,0 +1,2 @@
+Import-Module "/root/AtomicRedTeam/invoke-atomicredteam/Invoke-AtomicRedTeam.psd1" -Force
+$PSDefaultParameterValues = @{"Invoke-AtomicTest:PathToAtomicsFolder"="/root/AtomicRedTeam/atomics"}
diff --git a/terraform/ansible/roles/linux_install_art/tasks/main.yml b/terraform/ansible/roles/linux_install_art/tasks/main.yml
@@ -9,5 +9,17 @@
     Install-AtomicRedTeam -Force'
   register: output_art
 
+- name: create directory for default powershell profile
+  file: 
+   path: /root/.config/powershell
+   recurse: yes
+   state: directory
+
+- name: copy default powershell profile
+  copy:
+    src: Microsoft.PowerShell_profile.ps1
+    dest: /root/.config/powershell/Microsoft.PowerShell_profile.ps1
+    force: yes
+
 - debug:
-    var: output_art.stdout_lines
+    var: output_art.stdout_lines
diff --git a/terraform/ansible/roles/splunk_byo_windows/templates/outputs.conf.j2 b/terraform/ansible/roles/splunk_byo_windows/templates/outputs.conf.j2
@@ -2,4 +2,4 @@
 defaultGroup=my_indexers
 
 [tcpout:my_indexers]
-server={{ byo_splunk_ip }}:9997
+server={{ splunk_server.byo_splunk_ip }}:9997
Original file line number	Diff line number	Diff line change
		@@ -0,0 +1,2 @@
		Import-Module "/root/AtomicRedTeam/invoke-atomicredteam/Invoke-AtomicRedTeam.psd1" -Force
		$PSDefaultParameterValues = @{"Invoke-AtomicTest:PathToAtomicsFolder"="/root/AtomicRedTeam/atomics"}