Install the Splunk App for PCI Compliance

Before you install the app, make sure you have satisfied the install prerequisites for both Splunk Enterprise and the Splunk App for PCI Compliance. See Install prerequisites in this manual.

Download the app

1. Browse to splunk.com and log in with your Splunk.com ID. You must be a licensed Splunk App for PCI Compliance customer to download the product.
2. Download the Splunk App for PCI Compliance from Splunkbase.
   1. If you have Splunk Enterprise Security installed, install the Splunk App for PCI Compliance (for Splunk Enterprise Security).
   2. If you do not have Splunk Enterprise Security installed, install the Splunk App for PCI Compliance (for Splunk Enterprise).
3. Choose Download, and save the app file to your desktop.
4. Log in to the search head as an administrator.

Install the app

1. On the Splunk Enterprise search page, select Apps > Manage Apps and click Install App from File.
   Caution: Install the Splunk App for PCI Compliance (for Splunk Enterprise Security) on the same instance as Splunk Enterprise Security. If you do not install it on the same instance as Splunk Enterprise Security, the Splunk App for PCI Compliance (for Splunk Enterprise Security) will not work.
2. Select Choose File and browse to the Splunk App for PCI Compliance product file.
3. Select Upload to begin the installation.
4. Click Set up now to begin the installation.

Set up the App

1. Click Setup next to Splunk App for PCI Compliance in Manage Apps.
2. Click Start then wait until it completes the entire installation.
3. Restart your instance of Splunk platform.
4. Access Splunk Web from https and log in.

Add data

You can add data to the Splunk App for PCI compliance in two ways.

• Use data from preconfigured add-ons such as TA-bluecoat.
• Create custom add-ons to capture specific data in your environment.

Configure the app

To configure the app, click Configure in the menu bar. Follow the Steps to configure in this manual to begin setting up the Splunk App for PCI Compliance for your cardholder data environment.