- Splunk Answers
- :
- Splunk Administration
- :
- Deployment Architecture
- :
- Re: Splunk Install on Ubuntu 10.4
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark Topic
- Subscribe to Topic
- Mute Topic
- Printer Friendly Page
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi! I am new to Splunk. I just download the Splunk 4.1.4 tar file and untar on the host, What is the next step to configure Splunk on my Ubuntu Server.
Currently I am planning to configure splunk on ubuntu 10.4. Please sned me the documentation. Thanks.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
try to use sudo ./splunk start
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
I know its old, but you shouldnt be running splunk as root.
Install as a splunk user. Then if this issue arises, do.
As Root:
chown -R splukuser:splunkuser /opt/splunk/
Then as splunkuser
$ splunk start
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
one note I forgot to say... if you have splunk user in your system it'd be better to use "sudo -u splunk ..." to run under this user
before this command probably you will need to run "sudo chown -R splunk:splunk /opt/splunk" to change the owner from root to splunk
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Thank you, Vladimir! I had the same problem with unability to create "/opt/splunk/etc/licenses/enterprise", your advice to use "sudo ./splunk start" helped!
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi, can any one tell me how do I install splunkforwarder?
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
If you are using debian/ubuntu:
- download deb package
- in terminal lanch: sudo dpkg -i splunk_package_name.deb
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
splunk-4.1.5-85165-linux-2.6-intel.deb if you're using the 32 bit Ubuntu
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Install the .deb. It works flawlessly on Ubuntu 10.04.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi, what is exact package name so that I can use aptitude to Install it on my ubuntu server.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
cd to the dir where you untared
cd splunk/bin/
./splunk start
Please read the installation docs found at: http://www.splunk.com/base/Documentation/latest/Installation/InstallonLinux
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
You might start at http://www.splunk.com/base/Documentation/latest/Installation/InstallonLinux followed by http://www.splunk.com/base/Documentation/latest/Installation/StartSplunkforthefirsttime
BTW, you do know Splunk is available in .deb package format, which Ubuntu can natively install being a derivative of debian?
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Thank you very much for you help. I will check it out.
More Ways To Control Your Costs With Archived Metrics | Register for Tech Talk
.conf24 | Personalize your .conf experience with Learning Paths!
Threat Hunting Unlocked: How to Uplevel Your Threat Hunting With the PEAK Framework ...
