Getting Data In

Installing multiple instances on Windows

gpburgett
Splunk Employee
Splunk Employee

May be a stupid question, but here goes. I want to install a second Splunk instance on my windows machine so that I can have one for doing my stuff and one to show customers for demos. But the exe file only gives me the option to modify or remove my current instance. Do I need to move or adjust my current instance before I can install another instance? How is this done on Windows?

Tags (2)
0 Karma
1 Solution

Leo
Splunk Employee
Splunk Employee

Before version 4.2 you can run the second Splunk instance in the user mode (as opposed to the service mode it's running by default).

  • Copy your Splunk installation directory to where your 2nd instance will be.
  • Open two command prompt windows.
  • In the first one run: \splunk start splunkd --nodaemon
  • In the second one: \splunk start splunkweb --nodaemon
  • To stop them, type Ctrl+C in both windows.

Such instance will run while your user session is active.

View solution in original post

Jason
Motivator

Not a stupid question! There are many reasons, including getting better performance out of a heavy-duty box, that you would want to run multiple copies of Splunk. Windows installer just doesn't make it easy.

There is a 4.3.x writeup, including new service creation, ensuring both instances are unique, and upgrading the instances, posted here on the wiki.

cbergman_splunk
Splunk Employee
Splunk Employee

Leo
Splunk Employee
Splunk Employee

Before version 4.2 you can run the second Splunk instance in the user mode (as opposed to the service mode it's running by default).

  • Copy your Splunk installation directory to where your 2nd instance will be.
  • Open two command prompt windows.
  • In the first one run: \splunk start splunkd --nodaemon
  • In the second one: \splunk start splunkweb --nodaemon
  • To stop them, type Ctrl+C in both windows.

Such instance will run while your user session is active.

View solution in original post

araitz
Splunk Employee
Splunk Employee

Can't do that, sorry!

0 Karma

Leo
Splunk Employee
Splunk Employee

It will be possible in 4.2

0 Karma
.conf21 CFS Extended through 5/20!

Don't miss your chance
to share your Splunk
wisdom in-person or
virtually at .conf21!

Call for Speakers has
been extended through
Thursday, 5/20!