What Gets Installed

What Gets Installed

• Installation will require 100MB of disk space.
• Storing your indexed data will require 25-50% of the raw data size depending on the type of data and how you configure Splunk.
• The installation creates a home directory for Splunk - by default /opt/splunk .
• If you change the home directory location during installation and it doesn't end in /splunk , the installer will create a splunk subdirectory to avoid overwriting existing directories.
• You can install multiple copies of Splunk on the same host.
• Splunk allocates two network ports. By default only port 8000 (for HTTP or HTTPS), and 8089 (SOAP) are opened. The HTTPS port can be configured after installation.
• The Splunk Toolbar gets installed in SPLUNK_HOME/share/splunk/extras/splunkbar/splunkbar.xpi
• If you are using any type of package manager, you must install as root. You do not have to install as root if you are using the tarball installation.
• If you run the installation with root privileges, it will create a user splunk and a group splunk (if they don't exist). In this case, Splunk must either run as root or as a member of the splunk group.
• If you run the installation without root privileges, it won't attempt to create users or groups. You can run Splunk as the username you installed it as.
• If you want Splunk to run as a non-root user, and are using one of the packages (not a tarball), you can create the user and group first, run the installation as root, and then chown the resulting installation to the desired user.
• For a complete list of files that are installed, check out the file manifest for your install.