How Do You Install Splunk on a Debian/Ubuntu Linux Server?

Problem scenario
You have a Debian or Ubuntu Linux server. You want to install a trial version of Splunk. What should you do?

Solution
1. Sign up for an account to get the installation media: https://www.splunk.com/en_us/download.html
2. Click on "Linux"
3. Obtain the .deb file.
4. Put the .deb file on the Linux server.
5. Install the file. The command will look something like this:
sudo dpkg -i splunk-7.3.2-c60db69f8e32-linux-2.6-amd64.deb

6. Run this after it is installed: sudo /opt/splunk/bin/splunk status
7. Read the license agreement and enter "y" if you can accept.
8. Enter a username and password at the prompts.
9. Run this command: sudo /opt/splunk/bin/splunk start
10. By default you will have a web service listening on the external IP address of the server. You can construct the URL like this: http://x.x.x.x:8000
11. Replace x.x.x.x with the external IP address of the server and open a web browser from a desktop.
12. Log in with the credentials you configured on the back-end (in step #8 above).

Leave a comment

Your email address will not be published. Required fields are marked *