Documentation > Splunk > FAQ > Getting Started

FAQ

 


General Information
Company Background
How Splunk Works
Purchasing Splunk
Splunk Base and the Splunk Community
Customers and Partners
Getting Started
  • Getting Started
Accessing Data
How Splunk Handles Data
Administration
Integrating and Extending Splunk
Troubleshooting
Getting Help

Getting Started

This documentation does not apply to the most recent version of Splunk. Click here for the latest version.

Contents

Getting Started

How do I start?

If you haven't installed Splunk yet, read the Installation Manual. If you've already installed it, point your browser at port 8000 on your server. If you have an enterprise license, you will need to login with the default username "admin" and password "changeme."


I just installed Splunk with an enterprise and I'm trying to log into the web interface for the first time. It's asking me for a username and password. What are they?

The default username is "admin" and the password is "changeme."


How do I index a file?

Log into the Splunk web interface as an administrator and click on the "Admin" link at the top left. Then click on data inputs and follow the interface instructions from there.


Alternately, type $SPLUNK_HOME/bin/splunk help input for assistance with adding data via the commandline.


I've gotten to my Splunk interface, but what do I search for?

You should have a list of source types and hosts and sources toward the middle of your Splunk home page. Choose one, click and you will see all associated events.


Or you can open the Splunk drop-down menu at the top of the UI. Hover over "Saved Splunks" and choose "all." This search will return every event (up to the 10,000 most recent) in your Splunk index.


Can I install a new version of Splunk over an older version, without losing any of my configurations or data?

Yes. See the Installation Manual for instructions.

Retrieved from "http://docs.splunk.com/Documentation/Splunk/3.1.2/Faq/GettingStarted"

This documentation applies to the following versions of Splunk: 3.0 , 3.0.1 , 3.0.2 , 3.1 , 3.1.1 , 3.1.2 , 3.1.3 , 3.1.4 View the Article History for its revisions.


You must be logged into splunk.com in order to post comments. Log in now.

Was this documentation topic helpful?

If you'd like to hear back from us, please provide your email address:

We'd love to hear what you think about this topic or the documentation as a whole. Feedback you enter here will be delivered to the documentation team.

Feedback submitted, thanks!