install splunk for linux apps using CLI

[bwenge]

Hi,

How to install splunk for linux app using Command Line,not using Web interface.Can you also recommend me documentation on internet

Regards,

John

[JSapienza]

Right from the download page :

Unix/Linux: Decompress the downloaded file using a tool like tar -xvf and place the resulting folder into $SPLUNK_HOME/etc/apps. Then restart Splunk using the splunk restart command or the GUI.

[JSapienza]

Ok.. Here is were I would need more information on your intent with this Splunk installation since the unix app is mostly Web UI based. With the exception of an inputs.conf that informs splunk on which events should be forwarded.
I suggest you also have a look at : SPLUNK_HOME/etc/apps/unix/README.txt .

[bwenge]

Yes, I have extract the unix.tar.gz to $SPLUNK_HOME/etc/apps and I get new unix directory /opt/splunk/etc/apps/unix .So my question:How to check that my new installed Splunk for Unix apps is working?How to enable it without using Web Interface or I don't need that operation?

[JSapienza]

OK.. Great! And did you extract the unix.tar.gz to $SPLUNK_HOME/etc/apps ?

[bwenge]

Yes I have splunk installed and $SPLUNK_HOME = /opt/splunk.And it is is running as you can see
splunkd is running (PID: 14165).
splunk helpers are running (PIDs: 14166).

[JSapienza]

Typically $SPLUNK_HOME = /opt/splunk . If this is missing then I have to ask a basic question. Do actually have Splunk installed ?

If not, then I suggest you download the appropriate version from here: http://www.splunk.com/download .
And follow these instructions:
http://www.splunk.com/base/Documentation/latest/Installation/InstallonLinux

[bwenge]

Hi,
I have followed the procedure above to install splunk for *nix on linux server using CLI.Now I remark that I have new directory $SPLUNK_HOME/etc/apps/unix/default but I don't have directory $SPLUNK_HOME/etc/apps/unix/local.How to get it and How to enable that installed Splunk for *Nix app using CLI.

John