topic Re: Splunk Security Essentials in Splunk Enterprise Security

Splunk Security Essentials

bennett_riegel — Mon, 30 Oct 2023 01:56:01 GMT

I've downloaded the splunk security essential files all into my laptop, but I can't figure out how to upload into into splunk enterprise as an app. What is my next step and where do I go to do this?

Re: Splunk Security Essentials

inventsekar — Mon, 30 Oct 2023 02:10:20 GMT

>>> I've downloaded the splunk security essential files all into my laptop

May we know if you downloaded the single tar file (For example, ..splunk-security-essentials_371.tgz)

>>> but I can't figure out how to upload into into splunk enterprise as an app. What is my next step and where do I go to do this?

after downloading that tar file (for example..."splunk-security-essentials_371.tgz"), on your splunk, pls go to

(left side Apps dropdown) Apps -- - > Manage Apps --- > Install app from file.

then select the tar file and load it, it will install smoothly.. then splunk restart will be required.

Re: Splunk Security Essentials

bennett_riegel — Mon, 30 Oct 2023 13:48:49 GMT

I'm in the install app from file section, and I've downloaded the security essentials, but I don't see a file to put in there. What is the exact name of it because I feel like I've tried all of them?

Re: Splunk Security Essentials

inventsekar — Tue, 31 Oct 2023 00:56:26 GMT

Hi @bennett_riegel
1. did you download the app as a tar file from the Splunkbase
(the file name looks like "splunk-security-essentials_371.tgz")

2. on your Splunk, pls go to

(left side Apps dropdown) Apps -- - > Manage Apps --- > Install app from file.

3. then select the tar file("splunk-security-essentials_371.tgz") and load it, it will install smoothly..
4. then Splunk restart will be required.

Re: Splunk Security Essentials

isoutamo — Thu, 02 Nov 2023 12:28:23 GMT

you should follow these instructions https://docs.splunk.com/Documentation/SSE/3.7.1/Install/InstallSSE

If you have different version then select correct documentation based on your version.

r. Ismo