- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Was requested that I do development on my laptop, and to install Splunk ES 2.4 on my laptop (along with Splunk Enterprise 5.02, SideView Utility 1.35). Laptop is on Windows XP SP3 and has only 2 GB of ram. Is Splunk ES 2.4 even supported on this hardware platform?
Fyi, i did install the aforementioned, but my laptop started to shutdown (hard) intermittently and abruptly. At times, staying on for a few minutes, other times shutting down as soon as rebooted and logged in.
Hence, i had to deinstall. Booted up without loggin in; had the admin guy remote into my laptop & disable the Splunk processes via MS-Services; then I logged in and uninstalled all things Splunk.
Laptop is now working great, and I can still develop via my web browser going to the Linux based search head. However, would have been better if could get Splunk ES running on my laptop. Some other data points:
1) I just need to perform correlated searches from my laptop.
2) Search head would be on laptop pointing to existing indexers.
3) Had successfully installed/configured Splunk Enterprise 5.02 (w/out ES).
4) And was performing non-correlated distributed searches.
5) (using existing linux based search heads).
Any and all feedback would be appreciated. yep, basically just trying to understand if a laptop with XP can handle Splunk ES app.
Many thanks... Al
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Windows XP is not a supported operating system for Enterprise Security. Please review the supported operating systems list in the documentation. You should also read the hardware requirements for information about what kind of computing power you will need for your search head (and the rest of your deployment).
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Thanks for the 5.0.4 tip. And, i think that the system owners will eventually get there, it may just take several months.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
BTW: you may want to run Splunk 5.0.4. It has some fixes that should improve performance on all platforms.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Windows XP is not a supported operating system for Enterprise Security. Please review the supported operating systems list in the documentation. You should also read the hardware requirements for information about what kind of computing power you will need for your search head (and the rest of your deployment).
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Yep, that's what I thought (based on the install guide, which mentioned Windows 7 & 8, but not XP). Also, the hardware requirements for search head seemed pretty hefty, which makes sense for Splunking thru mass quantities of data. Appreciate the feedback, and will pass on to others in my organization, who want us to convert our laptops into development environments (including search heads). Cheers... Al
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Concur with ChrisG. FYI Microsoft will stop supporting and providing security patches for XP in April.
