Splunk Enterprise Security

Is it possible to install Splunk Security Enterprise 6.4.0 on Windows?

gl_splunkuser
Path Finder

Hello everyone. 

Currently I have a cluster architecture of Splunk Enterprise 8.0.7. 

  • SH cluster + Indexer Cluster + Master Node + Deployer, all of them in Windows.

Now I have to deploy Splunk Security over that architecture.

Is that possible?

Thanks in advance.

 

0 Karma
1 Solution

gl_splunkuser
Path Finder

Thanks for your answer @richgalloway 

So, Can I have a SH as a standalone and install in that search head the App, and connect the SH standalone with the indexer cluster?

Thanks in advance

View solution in original post

0 Karma

gl_splunkuser
Path Finder

Thanks for your answer @richgalloway 

So, Can I have a SH as a standalone and install in that search head the App, and connect the SH standalone with the indexer cluster?

Thanks in advance

0 Karma

richgalloway
SplunkTrust
SplunkTrust

Yes, you can run ES on a standalone Windows SH connected to an indexer cluster, although I think you'll be happier running ES on Linux.

---
If this reply helps you, Karma would be appreciated.

gl_splunkuser
Path Finder

Thank you for the useful help @richgalloway 

Yes, I know in linux works much better, but for now that's what I have...

Thanks again. 

0 Karma

richgalloway
SplunkTrust
SplunkTrust

Windows SHCs are not supported.  See https://docs.splunk.com/Documentation/ES/6.4.0/Install/InstallEnterpriseSecuritySHC#Prerequisites_fo...

---
If this reply helps you, Karma would be appreciated.
Get Updates on the Splunk Community!

New This Month in Splunk Observability Cloud - Metrics Usage Analytics, Enhanced K8s ...

The latest enhancements across the Splunk Observability portfolio deliver greater flexibility, better data and ...

Alerting Best Practices: How to Create Good Detectors

At their best, detectors and the alerts they trigger notify teams when applications aren’t performing as ...

Discover Powerful New Features in Splunk Cloud Platform: Enhanced Analytics, ...

Hey Splunky people! We are excited to share the latest updates in Splunk Cloud Platform 9.3.2408. In this ...