System Requirements

System Requirements

Host Operating System

• Linux 2.4-20+ kernel and glibc 2.3 / x86 (Requires 32-bit compatibility libraries installed)
• Solaris 8, 9 & 10 / Sparc
• Solaris 9 & 10 / x86
• Mac OS X 10.4 / PPC & x86
• ``FreeBSD`` 5.4 & 6.2 / x86 (FreeBSD 6.x requires 5.4 compatibility libraries installed)

Client Operating System / Browser

• Windows: Internet Explorer 6, Mozilla, Netscape or Firefox
• Linux: Mozilla or Firefox
• Mac OS X: Mozilla or Firefox

Server Hardware

64-bit architectures are not yet supported natively. They will be soon. In the meantime, for Linux, you can use the 32-bit compatibility libraries.

File System

• Linux - ext2/3, reiser3, XFS
• Solaris - UFS, NFS, ZFS, VXFS
• FreeBSD - FFS, UFS, NFS
• Mac - HFS, NFS

Note: Running Splunk on a filesystem not listed will result in a startup function named locktest not allowing Splunk to start

Minimum

• 1x 1.4 GHz CPU, 1 GB RAM
• 100 MB free disk space

Recommended

• 2x 2.8 GHz CPU, 4 GB RAM
• As much free disk space as the uncompressed size of the data you wish to keep available for searching in the Splunk Server index.

What Gets Installed

• The installation will fill nearly 100MB of disk space.
• Your Splunk index will need up to 100% the uncompressed size of all data it will index at once. By default the index goes into the same directory tree as Splunk's software, but you can specify a different location during installation.
• The default installation home is /opt/splunk .
• You can install multiple Splunk instances on the same host.
• The installation creates a directory for Splunk - by default /opt/splunk . If the path you specify doesn't end in /splunk , the installer will create a splunk subdirectory there to avoid overwriting existing directories.
• If you run the installer with root privileges, it will create a Unix user splunk and a Unix group splunk unless they already exist. Splunk will then need to be run as root or as a member of the splunk group.
• If you run the installer without root privileges, it won't attempt to create users or groups. You'll be able to run Splunk using the username under which you installed.
• The Splunk Server allocates three network ports. You can change these defaults.
  • 8000 - HTTP port. Users connect to Splunk with their browsers here.
  • 8001 - HTTPS port. Users who want SSL-encrypted browser sessions connect here.
  • 8089 - SOAP management port. The splunkweb interface process connect to the splunkd daemon here.

Who'll be able to Splunk your Data

• The free Splunk Server allows anyone with access to its HTTP, HTTPS or SOAP ports to search all indexed data. You can restrict access by requiring an HTTPS login.
• Splunk Professional restricts HTTP access by requiring a username and password. You can further secure Splunk's SOAP port so that only Splunk processes can use them.

• Was this topic useful?
• Post a comment