The prerequisites for both Splunk and the Splunk App for Enterprise Security must be met before beginning the installation of the Splunk App for Enterprise Security. Be sure that you have sufficient hardware, the appropriate system software (and correct version of Splunk), and the necessary add-ons for your deployment.
Existing Splunk installation
Before installing the Splunk App for Enterprise Security, you need to have an installed and configured instance of Splunk Enterprise 6.0.1 or later running in your environment. (Splunk Enterprise must be properly licensed with an Enterprise or Trial license before adding Splunk App for Enterprise Security. The Free license is not supported). See "Types of Splunk licenses" in the core Splunk product documentation for more information about Splunk Enterprise licensing.
Splunk App for Enterprise Security prerequisites
See "Prerequisites" in this manual to be sure you have met the requirements for the Splunk App for Enterprise Security deployment before starting installation.
Splunk deployment server
Install the Splunk App for Enterprise Security
This documentation applies to the following versions of Splunk® Enterprise Security: 3.0