Install on Mac OS X
You can install Splunk Enterprise on Mac OS X with a DMG package or a .tgz file.
Installation options
The Mac OS installation package comes in two forms: a DMG package and a .tgz file:
- If you require two installations in different locations on the same host, use the .tgz file. The DMG can only install Splunk Enterprise into the
/Applications/Splunk
path.
Graphical installation
- Navigate to the folder or directory where the installer is located.
- Double-click the DMG file.
A Finder window that contains thesplunk.pkg
opens. - Double-click the
Install Splunk
icon to start the installer.If you're installing on OSX 10.15, right-click the
Install Splunk
icon and click Open. When prompted again, click Open. - The Introduction panel lists version and copyright information. Click Continue.
- The License panel lists shows the software license agreement. Click Continue.
- You will be asked to agree to the terms of the software license agreement. Click Agree.
- In the Installation Type panel, click Install. This installs Splunk Enterprise in the default directory
/Applications/Splunk
. - You are prompted to type the password that you use to login to your computer.
- When the installation finishes, a popup informs you that an initialization must be performed. Click OK.
- A terminal window appears and you are prompted to specify a userid and password to use with Splunk Enterprise.
The password must be at least 8 characters in length. The cursor will not advance as you type.
Make note of the userid and password. You will use these credentials to login Splunk Enterprise. - A popup appears asking what you would like to do. Click Start and Show Splunk. The login page for Splunk Enterprise opens in your browser window.
- Close the Install Splunk window.
The installer places a shortcut on the Desktop so that you can launch Splunk Enterprise from your Desktop any time.
tar file install
Use the .tgz file to perform a manual installation of Splunk Enterprise. When you install Splunk Enterprise with the .tgz file:
- The service account is not created. If you want it to run Splunk Enterprise services with a specific user, you must create the user before starting the services.
- The default installation directory is the current working directory when you untar the .tgz file. The tar extraction will place all files in a
<working_directory>/Splunk
folder.
To install Splunk Enterprise on Mac OS X:
- Place the <splunk_package_name.tgz> file into a folder.
- From the terminal, expand the tar file into the local directory using the
tar
command:
tar xvzf splunk_package_name.tgz
- Change directory to
Splunk/bin
and start the services.
Next steps
Now that you have installed Splunk Enterprise:
- To start Splunk Enterprise services, see Start Splunk Enterprise for the first time.
- To configure Splunk Enterprise services to start at boot time, see Configure Splunk software to start at boot time in the Admin Manual.
- For more guidance on what to do, see What happens next?.
Are you looking for the universal forwarder installation?
The universal forwarder is a separate installation package, with its own installation procedures. To install a Splunk universal forwarder, see Install a *nix universal forwarder in the Universal Forwarder manual.
Upgrading?
If you are upgrading a Splunk Enterprise instance, see How to upgrade Splunk Enterprise.
Uninstall Splunk Enterprise
If you want to remove Splunk Enterprise, see Uninstall Splunk Enterprise.
Install on Linux | Run Splunk Enterprise as a different or non-root user |
This documentation applies to the following versions of Splunk® Enterprise: 7.3.0, 7.3.1, 7.3.2, 7.3.3, 7.3.4, 7.3.5, 7.3.6, 7.3.7, 7.3.8, 7.3.9, 8.0.0, 8.0.1, 8.0.2, 8.0.3, 8.0.4, 8.0.5, 8.0.6, 8.0.7, 8.0.8, 8.0.9, 8.0.10
Feedback submitted, thanks!