Splunk Enterprise Security

Command to set up ES 6.0.2 from CLI?

martinnepolean
Explorer

I have the below command to setup ES through CLI but looking only juniper add-on to get install. Please let me know the command for it.

I remember that we have the option to see the essential command arguments from Splunk server.

Please let me know the file which has the command argument details.

/opt/splunk/bin/splunk search '| essinstall --deployment_type

shc_deployer --skip-ta'

 

Tags (2)
0 Karma
1 Solution

richgalloway
SplunkTrust
SplunkTrust
If you have a file with all the details, what more do you need? Try examining the code at $SPLUNK_HOME/etc/apps/SplunkEnterpriseSecurity/bin/essinstall.py
---
If this reply helps you, Karma would be appreciated.

View solution in original post

0 Karma

richgalloway
SplunkTrust
SplunkTrust

You can specify the names of the add-ons to install, skip, or disable on the command line.  See the documentation at https://docs.splunk.com/Documentation/ES/6.2.0/Install/InstallEnterpriseSecurity#Install_Splunk_Ente...

You must know the name(s) of the subdirectories for each add-on.  AFAIK, there is no command to display those names prior to installing ES.

---
If this reply helps you, Karma would be appreciated.
0 Karma

martinnepolean
Explorer

Thanks @ricm , Do you know how can I view the essinstall command parameters? John Welch from splunk support showed me a file  which has all the details about essinstall command

 

0 Karma

richgalloway
SplunkTrust
SplunkTrust
If you have a file with all the details, what more do you need? Try examining the code at $SPLUNK_HOME/etc/apps/SplunkEnterpriseSecurity/bin/essinstall.py
---
If this reply helps you, Karma would be appreciated.
0 Karma
Get Updates on the Splunk Community!

Splunk Forwarders and Forced Time Based Load Balancing

Splunk customers use universal forwarders to collect and send data to Splunk. A universal forwarder can send ...

NEW! Log Views in Splunk Observability Dashboards Gives Context From a Single Page

Today, Splunk Observability releases log views, a new feature for users to add their logs data from Splunk Log ...

Last Chance to Submit Your Paper For BSides Splunk - Deadline is August 12th!

Hello everyone! Don't wait to submit - The deadline is August 12th! We have truly missed the community so ...