суббота, 8 декабря 2018 г.

Install SPLUNK on CentOS7


Install (get the link on Splunk website):
wget -O splunk-7.2.1-be11b2c46e23-linux-2.6-x86_64.rpm 'https://www.splunk.com/bin/splunk/DownloadActivityServlet?architecture=x86_64&platform=linux&version=7.2.1&product=splunk&filename=splunk-7.2.1-be11b2c46e23-linux-2.6-x86_64.rpm&wget=true'

rpm -i splunk-7.2.1-be11b2c46e23-linux-2.6-x86_64.rpm

Open port 8000, 80, 514(syslog):
vi /etc/sysconfig/iptables
   -A INPUT -p tcp -m state --state NEW -m tcp --dport 8000 -j ACCEPT
   -A INPUT -p tcp -m state --state NEW -m tcp --dport 80 -j ACCEPT
   -A INPUT -p udp -m state --state NEW -m udp --dport 514 -j ACCEPT
service iptables restart

Sent Splunk Home variable:
vi /etc/profile
   SPLUNK_HOME=/opt/splunk
source /etc/profile

Enable Splunk boot on start:
$SPLUNK_HOME/bin/splunk enable boot-start

Change SPLUNK web port:
vi /opt/splunk/etc/system/default/web.conf
   httpport = 80

Start the Splunk service:
service splunk start

Check if the service is running:
netstat -tulpn |grep splunk


Комментариев нет:

Отправить комментарий