Splunk® Supported Add-ons

Splunk Add-on for OSSEC

Download manual as PDF

Download topic as PDF

Install the Splunk Add-on for OSSEC

  1. Get the Splunk Add-on for OSSEC by downloading it from https://splunkbase.splunk.com/app/2808 or browsing to it using the app browser within Splunk Web.
  2. Perform any prerequisite steps before installing, if required.
  3. In a distributed, on-premises deployment, install the Splunk Add-on for OSSEC to your search heads and forwarders. This add-on does not need to be installed on indexers.
  4. Complete your installation.

If you need step-by-step instructions on how to install an add-on in your specific deployment environment, see the installation walkthroughs section at the bottom of this page for links to installation instructions specific to a single-instance deployment, distributed deployment, Splunk Cloud, or Splunk Light.

Installation walkthroughs

The Splunk Add-Ons manual includes an Installing add-ons guide that helps you successfully install any Splunk-supported add-on to your Splunk platform.

For a walkthrough of the installation procedure, follow the link that matches your deployment scenario:

Last modified on 23 September, 2016
Installation and configuration overview for the Splunk Add-on for OSSEC
Upgrade the Splunk Add-on for OSSEC

This documentation applies to the following versions of Splunk® Supported Add-ons: released

Was this documentation topic helpful?

Enter your email address, and someone from the documentation team will respond to you:

Please provide your comments here. Ask a question or make a suggestion.

You must be logged into splunk.com in order to post comments. Log in now.

Please try to keep this discussion focused on the content covered in this documentation topic. If you have a more general question about Splunk functionality or are experiencing a difficulty with Splunk, consider posting a question to Splunkbase Answers.

0 out of 1000 Characters