Getting Data In

Installing multiple instances on Windows

gpburgett
Splunk Employee
Splunk Employee

May be a stupid question, but here goes. I want to install a second Splunk instance on my windows machine so that I can have one for doing my stuff and one to show customers for demos. But the exe file only gives me the option to modify or remove my current instance. Do I need to move or adjust my current instance before I can install another instance? How is this done on Windows?

Tags (2)
0 Karma
1 Solution

Leo
Splunk Employee
Splunk Employee

Before version 4.2 you can run the second Splunk instance in the user mode (as opposed to the service mode it's running by default).

  • Copy your Splunk installation directory to where your 2nd instance will be.
  • Open two command prompt windows.
  • In the first one run: \splunk start splunkd --nodaemon
  • In the second one: \splunk start splunkweb --nodaemon
  • To stop them, type Ctrl+C in both windows.

Such instance will run while your user session is active.

View solution in original post

Jason
Motivator

Not a stupid question! There are many reasons, including getting better performance out of a heavy-duty box, that you would want to run multiple copies of Splunk. Windows installer just doesn't make it easy.

There is a 4.3.x writeup, including new service creation, ensuring both instances are unique, and upgrading the instances, posted here on the wiki.

Leo
Splunk Employee
Splunk Employee

Before version 4.2 you can run the second Splunk instance in the user mode (as opposed to the service mode it's running by default).

  • Copy your Splunk installation directory to where your 2nd instance will be.
  • Open two command prompt windows.
  • In the first one run: \splunk start splunkd --nodaemon
  • In the second one: \splunk start splunkweb --nodaemon
  • To stop them, type Ctrl+C in both windows.

Such instance will run while your user session is active.

araitz
Splunk Employee
Splunk Employee

Can't do that, sorry!

0 Karma

Leo
Splunk Employee
Splunk Employee

It will be possible in 4.2

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Event Series: The Agentic SOC: Trust Before Autonomy

AI is fundamentally changing security operations, but true progress requires more than just automation—it ...

Free Professional Services for .conf26 Attendees

This year at .conf26, we are doing something a little different. We are bringing the best minds from ...

Defend at Machine Speed: Your Guide to Security Sessions at .conf26

Splunk .conf26   With threats moving at machine speed and attack surfaces expanding across hybrid ...