Documentation: 3.3.3
|  Print Version Contents
This page last updated: 10/30/08 05:10pm

System requirements

Before you download and install the Splunk software, read the following sections for the supported system requirements. If you have ideas or requests for new features to add to future releases, email Splunk Support. Also, you can follow our Product Roadmap.

Check the release notes for details on known and resolved issues, and refer to the download page for the latest version to download.

Caution: Splunk does not provide a direct upgrade path to version 3.2.x from versions earlier than 3.0. You cannot upgrade directly from 2.x to 3.2. If you are upgrading from an earlier version of Splunk, refer to the upgrade and migration instructions for upgrading to 3.0 and upgrade to 3.0 or 3.1 before proceeding.

Host operating system

  • Linux 2.6+ kernel Linux distributions (x86 and x86_64) and major 2.4+ kernel Linux distributions with NPTL (x86)
  • Solaris 8, 9 & 10 / Sparc
  • Solaris 9 & 10 / x86
  • Mac OS X 10.4+ / x86 and PPC
  • FreeBSD 6.1 (6.2 for 64-bit versions) or later
  • AIX 5.2 and 5.3
    • AIX 5.4 has not yet been tested by Splunk. If you want to give it a try, please install it on a test server and send us feedback.
  • Windows 2000 Server (32-bit)
  • Windows XP Professional (32-bit)
  • Windows 2003 Server (32-bit)

Note: Splunk is certified to to run on English versions of Windows only. Non-English operating systems are not supported.
Note: Windows registry monitoring is not supported on Windows 2000 due to an issue with a Windows 2000 DLL.

Client operating system / browser (for access to Splunk Web)

You can verify your installed version of Flash here

Hardware capacity requirements

Splunk is a high-performance application. If you are performing a comprehensive evaluation of Splunk for production deployment, we recommend that you use hardware typical of your production environment; this hardware should meet or exceed the recommended hardware capacity specifications below.

Important: For all installations, a minimum of 2GB hard disk space is required, including lightweight forwarders.
Note: Running Splunk in virtual machine (VM) mode on any platform will degrade performance.

Recommended hardware capacity

Non-Windows platforms:
2x3.4 GHz CPU, 4 GB RAM
Windows platforms:
Multi-core Xeon or equivalent at 3Ghz, 4GB RAM

Minimum supported hardware capacity

Use the minimum supported hardware guidelines for personal use of Splunk.
Important: These are the minimum requirements for Splunk and apply to all configurations, including indexer and lightweight forwarder instances.

Non-Windows platforms:
1x1.4 GHz CPU, 1 GB RAM
Windows platforms:
Pentium 4 or equivalent at 2Ghz, 2GB RAM

Supported server hardware architectures

32 and 64-bit architectures are supported for some platforms. Splunk is supported on 32-bit Windows platforms only. See the download page page for details.

Supported file systems

  • Linux - ext2/3, reiser3, XFS
  • Solaris - UFS, ZFS, VXFS
  • FreeBSD - FFS, UFS
  • Mac - HFS
  • AIX - JFS, JFS2, NFS 3/4
  • Windows - NTFS, FAT32

Note: Most other file systems are supported. If you run Splunk on a filesystem that is not listed above, Splunk may run a startup utility named locktest. Locktest is a program that tests the start up process. If locktest runs and fails, the filesystem is not suitable for running Splunk.

Note: On FreeBSD, mounting as nullfs is not supported.

Storage and performance notes

  • For some tools for estimating your index size, refer to this topic on the Splunk Wiki.
  • For more information on ways to reduce your index density, click here
Start    |    Next: Before you install

Comments

  1. Is there any reason that the Splunk host o/s cannot be a guest VM in a virtualized environment?
    An interesting use case and by design this should work just fine. If you can't get this working please open a request to support by emailing the topic to support@splunk.com
    Posted by 76trombones on Nov 21 2008, 4:27pm

  2. Is there any reason that the Splunk host o/s cannot be a guest VM in a virtualized environment?

    yeah, I know using a guest VM to run Splunk to process the ESX logs is a funky idea, but for testing and development it's a valuable expedient...
    Posted by lbm on Nov 21 2008, 1:24pm

  3. What is this toolbar for? I'd like to know before trying to install it.
    Posted by kengumgum on Nov 06 2008, 5:52pm

  4. I wish I knew before.
    Posted by guchiken55 on Oct 27 2008, 7:15pm


  5. Posted by guchiken55 on Oct 27 2008, 7:15pm

  6. I am looking forward for the HPUX 11iv2 or 11iv3 supported Version. Any update on that?
    Posted by MMMMadan on Oct 27 2008, 8:21am

  7. I wish I knew before.
    Posted by challygon on Oct 10 2008, 4:29am

  8. FreeBSD - is there a list of all the packages and library requirement's for running Splunk on a FreeBSD 7 or later platform?
    Posted by tglasssey on Oct 05 2008, 8:53pm

  9. i dont know how to do this!
    Posted by Audreyvaughn7 on Sep 07 2008, 7:27am

  10. is this free
    Posted by mia on Aug 22 2008, 7:18pm

Log in to comment.