• Read This First
  • Before you install
    • System Requirements
  • What Gets Installed
• Step by Step Installation
  • Step 1: Unpack the software
    • RPM
    • deb
    • FreeBSD
    • Mac OS
    • Solaris
  • Step 2: Start Splunk
  • Step 3: Install your license
    • Using SplunkWeb
    • From the command line
• Install Splunk Toolbar
  • How to Install the Splunk toolbar for Firefox
    • Install from download page
    • Install from Splunk server
    • Uninstall Splunk toolbar
  • How to install the Splunk toolbar for Internet Explorer (beta)
    • Install Internet Explorer toolbar from download page
    • Install toolbar in Internet Explorer
    • Uninstall Internet Explorer toolbar
• Advanced Installation Topics
  • Automated installation
  • Configure Splunk to Start at System Startup
  • License Management
    • Installing or updating a license
  • Uninstall Splunk
    • RedHat Linux
    • Debian Linux
    • Solaris
    • FreeBSD
    • Manual uninstall
• Upgrade Instructions
  • Read this first before upgrading to 3.0.x
    • All bundles, all the time
    • Terminology changes
    • Event typer changes
    • What will be preserved on upgrade
    • Deployment server
    • License changes
  • Upgrading 2.1.x or 2.2.x to 3.0.x
    • Step 1: Administrative preparation
    • Step 2: Install the 3.0.x package and update your database
    • Step 3: Update and restore your configuration files
  • Upgrading to a later 3.0.x maintenance release
    • For rpm, pkg, and deb upgrades
    • For tar upgrades
• Help
  • Getting Help
    • Accessing help in SplunkWeb
    • Accessing help in the command line (CLI)
    • How can I learn more about Splunk's advanced features?
    • I lost my Splunk.com password. What do I do?
    • How do I report problems?
    • How can I make suggestions?
    • I have some questions that aren't answered here. Where can I get help?
  • Installer options
• Reference
  • File Manifest
  • PGP Public Key
    • Installing the key

What Gets Installed

• Installation will require 100MB of disk space.
• Storing your indexed data will require 25-50% of the raw data size depending on the type of data and how you configure Splunk.
• The installation creates a home directory for Splunk - by default /opt/splunk .
• If you change the home directory location during installation and it doesn't end in /splunk , the installer will create a splunk subdirectory to avoid overwriting existing directories.
• You can install multiple copies of Splunk on the same host.
• Splunk allocates two network ports. By default only port 8000 (for HTTP or HTTPS), and 8089 (SOAP) are opened. The HTTPS port can be configured after installation.
• The Splunk Toolbar gets installed in SPLUNK_HOME/share/splunk/extras/splunkbar/splunkbar.xpi
• If you are using any type of package manager, you must install as root. You do not have to install as root if you are using the tarball installation.
• If you run the installation with root privileges, it will create a user splunk and a group splunk (if they don't exist). Splunk must either run as root or as a member of the splunk group.
• If you run the installation without root privileges, it won't attempt to create users or groups. You can run Splunk as the username you installed it as.
• If you want Splunk to run as a non-root user, and are using one of the packages (not a tarball), you can create the user and group first, run the installation as root, and then chown the resulting installation to the desired user.
• For a complete list of files that are installed, check out the file manifest for your install.