Splunk® Business Flow (Legacy)

Admin Manual

Splunk Business Flow is no longer available for purchase as of June 20, 2020. Customers who have already purchased Business Flow will continue to have support and maintenance per standard support terms for the remainder of contractual commitments.

Install Splunk Business Flow

Before you install Splunk Business Flow you need to satisfy the following requirements.

Requirement Description
Splunk Enterprise or Splunk Cloud deployment Splunk Business Flow is an app for the Splunk platform and is compatible with both Splunk Enterprise and Splunk Cloud versions 7.0.x, 7.1.x, 7.2.x, 7.3.x, 8.0.x . If you are running an earlier version of Splunk Enterprise, see How to upgrade Splunk Enterprise in the Splunk Enterprise Installation Manual.
Role You must be a Splunk platform administrator to install and set up Splunk Business Flow on your Splunk platform deployment.
Browser Splunk Business Flow supports the latest versions of Chrome, Firefox, and Internet Explorer 11.
Internet connectivity The search head and browser must be connected to the internet to use Splunk Business Flow. You can customize proxy settings in the sbf.conf file to enable Splunk business Flow (SBF) to use your proxy.
Hardware See Reference hardware in the Splunk Enterprise Capacity Planning manual.

Install Splunk Business Flow on a single-instance deployment of Splunk Enterprise

Follow these steps to install Splunk Business Flow on a single-instance Splunk Enterprise deployment.

  1. Download the app from Splunkbase using your entitlement account.
  2. Untar the downloaded file in the $SPLUNK_HOME/etc/apps directory on *nix or %SPLUNK_HOME%\etc\apps directory on Windows.
  3. Restart Splunk Enterprise.

Install Splunk Business Flow in a distributed search deployment

In a distributed deployment, install Splunk Business Flow on your search heads or search head cluster only.

For unclustered search heads, follow the same procedure as a single-instance deployment:

  1. Download the app from Splunkbase using your entitlement account.
  2. Untar the downloaded file in the $SPLUNK_HOME/etc/apps directory of your search head on *nix or %SPLUNK_HOME%\etc\apps directory of your search head on Windows.
  3. Restart the search head.

For a search head cluster, use the configuration bundle method to distribute the app to your cluster members. See Deploy a configuration bundle in the Splunk Enterprise Distributed Search manual.

Install Splunk Business Flow on Splunk Cloud

You can install SBF on Splunk Cloud through Splunkbase on a single search head or search head cluster. If you install SBF on a Splunk Cloud search head cluster, you need Splunk Cloud version 7.1 or higher.

Follow these steps to install Splunk Business Flow on Splunk Cloud:

  1. In your Splunk Cloud deployment, click the gear icon.
  2. Click Install apps.
  3. Type Splunk Business Flow in the search bar.
  4. Click Install on the Splunk Business Flow app.
  5. Click Continue.
  6. Enter your splunk.com username and password.
  7. Click "Login and Install".
Last modified on 15 April, 2020
What metadata is stored in the SBF Hosted Environment?   Configure Splunk Business Flow

This documentation applies to the following versions of Splunk® Business Flow (Legacy): -Latest-


Was this topic useful?







You must be logged into splunk.com in order to post comments. Log in now.

Please try to keep this discussion focused on the content covered in this documentation topic. If you have a more general question about Splunk functionality or are experiencing a difficulty with Splunk, consider posting a question to Splunkbase Answers.

0 out of 1000 Characters