Getting Data In

How to install Splunk eventgen in a Windows environment?

anjchatt
New Member

Hello,
Could you please let me know how to install eventgen in window environment.
Regards,
Anjan

0 Karma

ssadanala1
Contributor

You can install the event gen app as any other app from GUI
https://splunkbase.splunk.com/app/1924/

For Tutorials and further info
https://github.com/splunk/eventgen/tree/master

Happy Splunking !!

0 Karma

anjchatt
New Member

I didn't find any instruction for Windows environment , can u please share if you have.

0 Karma

amitm05
Builder

Install the app from GUI as said above.
Use Windows CMD, to execute the same set of commands that are mentioned for Linux. There are no differences in commands.

0 Karma

guythomasdavis
Explorer

Actually there is a problem in the latest eventgen where I had to comment out a line in a python file in order to get it to install. Once done I then ran into other issues creating an app and creating an eventgen.conf in local directory which was solved by:

"What I've found is if you are on Windows copy eventgen.conf to locals folder and run icacls against it to change permissions. icacls C:\program files\Splunk\etc\apps\your app here\local\eventgen.conf /grant SYSTEM:F.

Took me forever to figure this out. Also every time I edit the file I have to change perms again. Became such a pain that I wrote a c# service to watch for eventgen.conf changes and change perms automatically."

0 Karma

xpac
SplunkTrust
SplunkTrust

Why do you think there's a seperate installation guide for Windows? Should be the same as for Linux. Just do it 😉

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Turn Cisco Telemetry Into Action with Cisco Data Fabric, powered by the Splunk ...

The surge in machine data is already hitting enterprise budgets, and the agentic era will only intensify it. ...

Persistent Queue at TcpOut — One of Splunk's Most Practical Features

Splunk introduced persistent queueing at the tcpout layer as one of the most practical resilience features in ...

Skip the Awkward Silence: Have a .conf-ersation at .conf26

Picture this. You arrive at .conf26 already having your socializing and networking plans mapped out. No ...