- Find Answers
- :
- Splunk Administration
- :
- Deployment Architecture
- :
- Hi i need to establish splunk in new environment ...
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark Topic
- Subscribe to Topic
- Mute Topic
- Printer Friendly Page
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
tldr; system requirements documentation
Before you install, try looking at the installation manual.
Review the system requirements for installation. Additional requirements might apply based on the operating system on which you install Splunk Enterprise and how you plan to use Splunk Enterprise.
See "Components of a Splunk Enterprise deployment" to learn about the Splunk Enterprise ecosystem, and "Splunk architecture and processes" to learn what the installer puts on your computer.
See "Secure your Splunk Enterprise installation" and, where appropriate, secure the machine on which you plan to install Splunk Enterprise.
Download the installation package for your system from the Splunk Enterprise download page.
Perform the installation by using the step-by-step installation instructions for your operating system.
If this is the first time you have installed Splunk Enterprise, see the Search Tutorial to learn how to index data into Splunk and search that data using the Splunk Enterprise search language.
After you install Splunk Enterprise, calculate how much space you need to index your data. See "Estimate your storage requirements" for more information.
To run Splunk Enterprise in a production environment and to understand how much hardware such an environment requires, see the Capacity Planning manual.
Also checkout this splunk-sizing tool (not from Splunk)
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi @pavanae
This is a very broad question. Have you already looked at the Installation documentation? There are a lot of things to consider such as the type of environment you want to set up, how much data you expect to be indexing, system requirements, and more. I'd suggest starting here:
http://docs.splunk.com/Documentation/Splunk/6.2.3/Installation/Beforeyouinstall
and if you have specific questions about any part of the process, then users on Splunk Answers can help you make sense of things.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
tldr; system requirements documentation
Before you install, try looking at the installation manual.
Review the system requirements for installation. Additional requirements might apply based on the operating system on which you install Splunk Enterprise and how you plan to use Splunk Enterprise.
See "Components of a Splunk Enterprise deployment" to learn about the Splunk Enterprise ecosystem, and "Splunk architecture and processes" to learn what the installer puts on your computer.
See "Secure your Splunk Enterprise installation" and, where appropriate, secure the machine on which you plan to install Splunk Enterprise.
Download the installation package for your system from the Splunk Enterprise download page.
Perform the installation by using the step-by-step installation instructions for your operating system.
If this is the first time you have installed Splunk Enterprise, see the Search Tutorial to learn how to index data into Splunk and search that data using the Splunk Enterprise search language.
After you install Splunk Enterprise, calculate how much space you need to index your data. See "Estimate your storage requirements" for more information.
To run Splunk Enterprise in a production environment and to understand how much hardware such an environment requires, see the Capacity Planning manual.
Also checkout this splunk-sizing tool (not from Splunk)
Enterprise Security Content Update (ESCU) | New Releases
Why am I not seeing the finding in Splunk Enterprise Security Analyst Queue?
Index This | What are the 12 Days of Splunk-mas?
