Installation Manual

Install on HP-UX

You can install Splunk Enterprise on HP/UX using a tar file.

To install Splunk Enterprise on an HP-UX system, expand the tar file, using GNU tar, into an appropriate directory. The default install directory is /opt/splunk.

NOTE: The system default tar on HP-UX will not successfully extract the Splunk Enterprise tar file. Either use GNU tar or unpack the tar on another platform.

When you install with the tar file:

• Splunk Enterprise does not create the splunk user automatically. If you want Splunk Enterprise to run as a specific user, you must create the user manually.
• Be sure the disk partition has enough space to hold the uncompressed volume of the data you plan to keep indexed.

Upgrading?

If you are upgrading, review "How to upgrade Splunk Enterprise" for instructions and migration considerations before proceeding.

Start Splunk Enterprise

Splunk Enterprise can run as any user on the local system. If you run it as a non-root user, make sure that it has the appropriate permissions to read the inputs that you specify.

To start Splunk Enterprise from the command line interface, run the following command from $SPLUNK_HOME/bin directory (where $SPLUNK_HOME is the directory into which you installed Splunk Enterprise):

 ./splunk start

By convention, this document uses:

• $SPLUNK_HOME to identify the path to your Splunk Enterprise installation.
• $SPLUNK_HOME/bin/ to indicate the location of the command line interface.

Note: The HP-UX version of Splunk Enterprise does not register itself to auto-start on reboot. However, you can register it by running the following command in the $SPLUNK_HOME/bin directory in a shell prompt:

./splunk enable boot-start

Startup options

The first time you start Splunk Enterprise after a new installation, you must accept the license agreement. To start Splunk Enterprise and accept the license in one step:

 $SPLUNK_HOME/bin/splunk start --accept-license

Note: There are two dashes before the accept-license option.

Launch Splunk Web and log in

After you start Splunk Enterprise and accept the license agreement,

1. In a browser window, access Splunk Web at

http://<hostname>:port

• hostname is the host machine.
• port is the port you specified during the installation (the default port is 8000).

2. Splunk Web prompts you for login information (default, username admin and password changeme) before it launches. If you switch to Splunk Free, you will bypass this logon page in future sessions.

What's next?

Now that you've installed Splunk Enterprise, what comes next?

Uninstall Splunk Enterprise

To learn how to uninstall Splunk Enterprise, read "Uninstall Splunk Enterprise" in this manual.