System Requirements
This documentation does not apply to the most recent version of Splunk.
This documentation applies to the following versions of Splunk:
2.2 , 2.2.1 , 2.2.3 , 2.2.6
System Requirements
Host Operating System
- Linux 2.4-20+ kernel and glibc 2.3 / x86 (Requires 32-bit compatibility libraries installed)
- Solaris 8, 9 & 10 / Sparc
- Solaris 9 & 10 / x86
- Mac OS X 10.4 / PPC & x86
- ``FreeBSD`` 5.4 & 6.2 / x86 (FreeBSD 6.x requires 5.4 compatibility libraries installed)
Client Operating System / Browser
- Windows: Internet Explorer 6, Mozilla, Netscape or Firefox
- Linux: Mozilla or Firefox
- Mac OS X: Mozilla or Firefox
Server Hardware
64-bit architectures are not yet supported natively. They will be soon. In the meantime, for Linux, you can use the 32-bit compatibility libraries.
File System
- Linux - ext2/3, reiser3, XFS
- Solaris - UFS, NFS, ZFS, VXFS
- FreeBSD - FFS, UFS, NFS
- Mac - HFS, NFS
Note: Running Splunk on a filesystem not listed will result in a startup function named locktest not allowing Splunk to start
Minimum
- 1x 1.4 GHz CPU, 1 GB RAM
- 100 MB free disk space
Recommended
- 2x 2.8 GHz CPU, 4 GB RAM
- As much free disk space as the uncompressed size of the data you wish to keep available for searching in the Splunk Server index.
What Gets Installed
- The installation will fill nearly 100MB of disk space.
- Your Splunk index will need up to 100% the uncompressed size of all data it will index at once. By default the index goes into the same directory tree as Splunk's software, but you can specify a different location during installation.
- The default installation home is /opt/splunk .
- You can install multiple Splunk instances on the same host.
- The installation creates a directory for Splunk - by default /opt/splunk . If the path you specify doesn't end in /splunk , the installer will create a splunk subdirectory there to avoid overwriting existing directories.
- If you run the installer with root privileges, it will create a Unix user splunk and a Unix group splunk unless they already exist. Splunk will then need to be run as root or as a member of the splunk group.
- If you run the installer without root privileges, it won't attempt to create users or groups. You'll be able to run Splunk using the username under which you installed.
- The Splunk Server allocates three network ports. You can change these defaults.
- 8000 - HTTP port. Users connect to Splunk with their browsers here.
- 8001 - HTTPS port. Users who want SSL-encrypted browser sessions connect here.
- 8089 - SOAP management port. The splunkweb interface process connect to the splunkd daemon here.
Who'll be able to Splunk your Data
- The free Splunk Server allows anyone with access to its HTTP, HTTPS or SOAP ports to search all indexed data. You can restrict access by requiring an HTTPS login.
- Splunk Professional restricts HTTP access by requiring a username and password. You can further secure Splunk's SOAP port so that only Splunk processes can use them.