Hardware and software requirements for the Splunk Add-on for Sysmon For Linux

For Sysmon For Linux setup requirements, please refer to the product documentation at https://github.com/Sysinternals/SysmonForLinux#installation

Splunk admin requirements

To install and configure the Splunk Add-on for Sysmon For Linux, you must be a member of the admin or sc_admin role.

Splunk platform requirements

Because this add-on runs on the Splunk platform, all of the system requirements apply for the Splunk software that you use to run this add-on.

• For Splunk Enterprise system requirements, see System Requirements in the Splunk Enterprise Installation Manual.
• If you are managing on-premises forwarders to get data into Splunk Cloud, see System Requirements in the Splunk Enterprise Installation Manual, which includes information about forwarders.