Documentation:
3.0.2
This page last updated: 10/16/07 05:10pm
Step 2: Start Splunk
1. Start the server
/opt/splunk/bin/splunk start
(or whatever path you installed)
The first time you run a new installation, you will be prompted with a license agreement. You must accept the license terms to continue to use Splunk.
Splunk can run as any user on the local system. If you run Splunk as a non-root user you will need to ensure that Splunk has the appropriate permissions to read the inputs that you specify.
The first time you start splunk after a new installation, you will be presented with the license agreement and asked to accept the license. If you want to bypass these steps, you can start splunk and accept the license in one step:
/opt/splunk/bin/splunk start --accept-license
Please note: there are two dashes before the accept-license option.
2. Load the Splunk GUI in your browserhttp://mysplunkhost:8000
(or whatever host and port you installed)
(Use username "admin" and password "changeme" to login to your new Splunk installation for the first time.)
3. Set up one or more data inputsThe first time you browse a new installation, you will see a Guided Setup tool that helps you set up data inputs, licenses, and other configuration options. Alternately, you can configure data inputs from the command line. Below is a typical example.
/opt/splunk/bin/splunk add tail /var/log
Your Splunk Server should show indexed data on its home page immediately after you add a data input. As soon as you see a number greater than "0 events" listed on the server's home page, you're ready to start Splunking!
Comments
good
Posted by juliowilmer on Feb 26 2008, 10:44am
Trying Splunk on an Intel iMac. Installed via .pkg file, but when I try to start splunk, splunkd times out. Is this a known issue? not seeing anything relevant in support or the forums
Posted by murphycoverdot2001 on Aug 25 2007, 6:47pm