What is Splunk Security Software's Validation Criteria

[smith_]

Hi Guys,

I'm trying to figure out what are the prerequisite to validate the splunk like 
Running Service Name /  Application Name in Control Panel / and Registry path.

[smith_]

I 'm trying to accomplish  the presence of splunk in all the machines in our environment by creating a shell script and find out the system with out splunk.

[richgalloway]

That's a difficult sentence to parse.  I hope I understand the request.

Instructions for installing Splunk on Linux systems are at https://docs.splunk.com/Documentation/Splunk/9.1.1/Installation/InstallonLinux .  You won't find a ready-made script, but the documented steps should be easy enough to automate.  Many customers use software management tools to deploy software on all machines.

I don't understand what is meant by "find out the system with out Splunk."

[smith_]

Apologies, to find host without Splunk Forwarders.

[richgalloway]

That's a challenge, because machines without a Splunk forwarder installed will not be reporting anything to Splunk.  You would need to have a list of all machines then subtract those that have a forwarder installed (which Splunk can provide) to get the list of machines missing a forwarder.

[richgalloway]

What are you trying to accomplish?  What do you mean by "validate Splunk"?