Are you a member of the Splunk Community?
- Find Answers
- :
- Splunk Administration
- :
- Deployment Architecture
- :
- Re: install splunk for linux apps using CLI
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark Topic
- Subscribe to Topic
- Mute Topic
- Printer Friendly Page
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
install splunk for linux apps using CLI
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Right from the download page :
Unix/Linux: Decompress the downloaded file using a tool like tar -xvf and place the resulting folder into $SPLUNK_HOME/etc/apps. Then restart Splunk using the splunk restart command or the GUI.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Ok.. Here is were I would need more information on your intent with this Splunk installation since the unix app is mostly Web UI based. With the exception of an inputs.conf that informs splunk on which events should be forwarded.
I suggest you also have a look at : SPLUNK_HOME/etc/apps/unix/README.txt .
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Yes, I have extract the unix.tar.gz to $SPLUNK_HOME/etc/apps and I get new unix directory /opt/splunk/etc/apps/unix .So my question:How to check that my new installed Splunk for Unix apps is working?How to enable it without using Web Interface or I don't need that operation?
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
OK.. Great! And did you extract the unix.tar.gz to $SPLUNK_HOME/etc/apps ?
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Yes I have splunk installed and $SPLUNK_HOME = /opt/splunk.And it is is running as you can see
splunkd is running (PID: 14165).
splunk helpers are running (PIDs: 14166).
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Typically $SPLUNK_HOME = /opt/splunk . If this is missing then I have to ask a basic question. Do actually have Splunk installed ?
If not, then I suggest you download the appropriate version from here: http://www.splunk.com/download .
And follow these instructions:
http://www.splunk.com/base/Documentation/latest/Installation/InstallonLinux
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi,
I have followed the procedure above to install splunk for *nix on linux server using CLI.Now I remark that I have new directory $SPLUNK_HOME/etc/apps/unix/default but I don't have directory $SPLUNK_HOME/etc/apps/unix/local.How to get it and How to enable that installed Splunk for *Nix app using CLI.
John
Take Action Automatically on Splunk Alerts with Red Hat Ansible Automation Platform
Calling All Security Pros: Ready to Race Through Boston?
Beyond Detection: How Splunk and Cisco Integrated Security Platforms Transform ...
