This documentation applies to the following versions of Splunk: 4.0 , 4.0.1 , 4.0.2 , 4.0.3 , 4.0.4 , 4.0.5 , 4.0.6
This topic provides the procedures for installing Splunk on Solaris.
Splunk for Solaris is available as a PKG file or a tarball.
The PKG installation package includes a request file that prompts you to answer a few questions before Splunk installs.
pkgadd -d ./splunk_product_name.pkg
A list of the available packages is displayed.
The installer then prompts you to specify a base installation directory.
/opt/splunk, leave this blank.
To upgrade an existing Splunk installation using a PKG file, use the same command line as you would for a fresh install.
pkgadd -d ./splunk_product_name.pkg
You will be prompted to overwrite any changed files, answer yes to every one.
To run the upgrade silently (and not have to answer yes for every file overwrite), type:
pkgadd -n -d ./splunk_product_name.pkg
To install Splunk on a Solaris system, expand the tarball into an appropriate directory. By default, Splunk installs into /opt/splunk/.
When installing with the tarball:
splunk user automatically. If you want Splunk to run as a specific user, you must create the user manually.
Splunk package info:
pkginfo -l splunk
List all packages:
pkginfo
Splunk can run as any user on the local system. If you run Splunk as a non-root user, make sure that Splunk has the appropriate permissions to read the inputs that you specify. For more information, refer to the instructions on running Splunk as a non-root user.
To start Splunk from the command line interface, run the following command from $SPLUNK_HOME/bin directory (where $SPLUNK_HOME is the directory into which you installed Splunk):
./splunk start
By convention, Splunk's documentation uses:
$SPLUNK_HOME to identify the path to your Splunk installation.
$SPLUNK_HOME/bin/ to indicate the location of the command line interface.
The first time you start Splunk after a new installation, you must accept the license agreement. To start Splunk and accept the license in one step:
$SPLUNK_HOME/bin/splunk start --accept-license
Note: There are two dashes before the accept-license option.
After you start Splunk and accept the license agreement,
1. In a browser window, access Splunk Web at http://mysplunkhost:port, where:
mysplunkhost is the host machine.
port is the port you specified during the installation (8000).
2. If you are running Splunk with a Free license, Splunk Web launches without prompting you for login information. If you are running Splunk with an Enterprise license, Splunk Web prompts you for login information (default, username admin and password changeme) before it launches.
Now that you've installed Splunk, what comes next?
Use your local package management commands to uninstall Splunk. In most cases, files that were not originally installed by the package are retained. These files include your configuration and index files which are under your installation directory.
pkgrm splunk