Getting Data In

How to install Splunk eventgen in a Windows environment?

anjchatt
New Member

Hello,
Could you please let me know how to install eventgen in window environment.
Regards,
Anjan

0 Karma

ssadanala1
Contributor

You can install the event gen app as any other app from GUI
https://splunkbase.splunk.com/app/1924/

For Tutorials and further info
https://github.com/splunk/eventgen/tree/master

Happy Splunking !!

0 Karma

anjchatt
New Member

I didn't find any instruction for Windows environment , can u please share if you have.

0 Karma

amitm05
Builder

Install the app from GUI as said above.
Use Windows CMD, to execute the same set of commands that are mentioned for Linux. There are no differences in commands.

0 Karma

guythomasdavis
Explorer

Actually there is a problem in the latest eventgen where I had to comment out a line in a python file in order to get it to install. Once done I then ran into other issues creating an app and creating an eventgen.conf in local directory which was solved by:

"What I've found is if you are on Windows copy eventgen.conf to locals folder and run icacls against it to change permissions. icacls C:\program files\Splunk\etc\apps\your app here\local\eventgen.conf /grant SYSTEM:F.

Took me forever to figure this out. Also every time I edit the file I have to change perms again. Became such a pain that I wrote a c# service to watch for eventgen.conf changes and change perms automatically."

0 Karma

xpac
SplunkTrust
SplunkTrust

Why do you think there's a seperate installation guide for Windows? Should be the same as for Linux. Just do it 😉

0 Karma
Get Updates on the Splunk Community!

What's new in Splunk Cloud Platform 9.1.2312?

Hi Splunky people! We are excited to share the newest updates in Splunk Cloud Platform 9.1.2312! Analysts can ...

What’s New in Splunk Security Essentials 3.8.0?

Splunk Security Essentials (SSE) is an app that can amplify the power of your existing Splunk Cloud Platform, ...

Let’s Get You Certified – Vegas-Style at .conf24

Are you ready to level up your Splunk game? Then, let’s get you certified live at .conf24 – our annual user ...