Install prerequisites

The prerequisites for both Splunk and the Splunk App for Enterprise Security must be met before beginning the installation of the Splunk App for Enterprise Security. Be sure that you have sufficient hardware, the appropriate system software (and correct version of Splunk), and the necessary add-ons for your deployment.

Existing Splunk installation

Before installing the Splunk App for Enterprise Security, you need to have an installed and configured instance of Splunk Enterprise 6.0.1 or later running in your environment. (Splunk Enterprise must be properly licensed with an Enterprise or Trial license before adding Splunk App for Enterprise Security. The Free license is not supported). See "Types of Splunk licenses" in the core Splunk product documentation for more information about Splunk Enterprise licensing.

See the Splunk "system requirements" in the core Splunk product Installation Manual for details.

Download Splunk 6.0.1 or later, install the additional license, and read the Splunk Installation Manual in the core product documentation for more installation information.

Splunk App for Enterprise Security prerequisites

See "Prerequisites" in this manual to be sure you have met the requirements for the Splunk App for Enterprise Security deployment before starting installation.