About this tutorial

This section briefly explains what you need to run Splunk and complete this tutorial.

Requirements

A supported browser (See system requirements and release notes).
A copy of Splunk:
- On an individual machine, or elsewhere in the organization. (Download and install.)
- On Splunk hosted demo servers.

Log in

Splunk does not require a login when using a Free license. An Enterprise license requires a login:

For an individual server, the default Splunk username is admin and password is changeme.
For the Splunk hosted demo server, the username and password are guest and guest.

Splunk Web

Splunk Web runs by default on port 8000 of the host on which it is installed.

If you're running Splunk on your local machine, the URL to access Splunk Web is http://localhost:8000
If you're running Splunk on a different machine, the URL to access Splunk Web is http://<hostname>:8000

where <hostname> is the name of the machine Splunk is running on.

Logging in to Splunk takes you to the dashboard and Splunk Web. For this tutorial, you only need to know that:

You type your search query in the search bar at the top of the dashboard.
- The down-arrow button, to the left of the search bar, is a drop-down menu.
- The green button, to the right of the search bar, enters your search.
You change the time range with the drop-down menu below the search box.
Splunk displays the number of occurrences of your search results graphically on the timeline.
Splunk lists each individual event that results from your search underneath the timeline and ordered by timestamp.

Read the other sections of the Splunk User Manual for more information.

Command line interface (CLI)

Splunk includes a command line interface (CLI) that runs from a shell on the server host. The Splunk CLI is a great way to integrate Splunk into admin scripts. Read Use the Splunk CLI for more information.

Previous: Change Splunk server default settings | Next: Simple searches

Comments

No comments have been submitted.