topic What is Splunk Security Software's Validation Criteria in Security

What is Splunk Security Software's Validation Criteria

AL3Z — Thu, 14 Sep 2023 07:27:44 GMT

Hi Guys,

I'm trying to figure out what are the prerequisite to validate the splunk like
Running Service Name / Application Name in Control Panel / and Registry path.

Re: What is Splunk Security Software's Validation Criteria

richgalloway — Thu, 14 Sep 2023 14:12:49 GMT

What are you trying to accomplish? What do you mean by "validate Splunk"?

Re: What is Splunk Security Software's Validation Criteria

AL3Z — Thu, 14 Sep 2023 14:32:14 GMT

I 'm trying to accomplish the presence of splunk in all the machines in our environment by creating a shell script and find out the system with out splunk.

Re: What is Splunk Security Software's Validation Criteria

richgalloway — Thu, 14 Sep 2023 17:08:23 GMT

That's a difficult sentence to parse. I hope I understand the request.

Instructions for installing Splunk on Linux systems are at https://docs.splunk.com/Documentation/Splunk/9.1.1/Installation/InstallonLinux . You won't find a ready-made script, but the documented steps should be easy enough to automate. Many customers use software management tools to deploy software on all machines.

I don't understand what is meant by "find out the system with out Splunk."

Re: What is Splunk Security Software's Validation Criteria

AL3Z — Thu, 14 Sep 2023 17:22:43 GMT

Apologies, to find host without Splunk Forwarders.

Re: What is Splunk Security Software's Validation Criteria

richgalloway — Thu, 14 Sep 2023 17:25:55 GMT

That's a challenge, because machines without a Splunk forwarder installed will not be reporting anything to Splunk. You would need to have a list of all machines then subtract those that have a forwarder installed (which Splunk can provide) to get the list of machines missing a forwarder.