diff --git a/group_vars/all/splunk.yml b/group_vars/all/splunk.yml
new file mode 100644
index 0000000..a83f583
--- /dev/null
+++ b/group_vars/all/splunk.yml
@@ -0,0 +1,2 @@
+---
+splunk_archive: splunk-7.2.0-8c86330ac18-Linux-x86_64.tgz