Splunk® Enterprise

Installation Manual

Splunk Enterprise version 7.3 is no longer supported as of October 22, 2021. See the Splunk Software Support Policy for details. For information about upgrading to a supported version, see How to upgrade Splunk Enterprise.
This documentation does not apply to the most recent version of Splunk® Enterprise. For documentation on the most recent version, go to the latest release.

Install on Mac OS X

You can install Splunk Enterprise on Mac OS X with a DMG package or a .tgz file.

Installation options

The Mac OS installation package comes in two forms: a DMG package and a .tgz file:

  • If you require two installations in different locations on the same host, use the .tgz file. The DMG can only install Splunk Enterprise into the /Applications/Splunk path.

Graphical installation

  1. Navigate to the folder or directory where the installer is located.
  2. Double-click the DMG file.
    A Finder window that contains the splunk.pkg opens.
  3. Double-click the Install Splunk icon to start the installer.

    If you're installing on OSX 10.15, right-click the Install Splunk icon and click Open. When prompted again, click Open.

  4. The Introduction panel lists version and copyright information. Click Continue.
  5. The License panel lists shows the software license agreement. Click Continue.
  6. You will be asked to agree to the terms of the software license agreement. Click Agree.
  7. In the Installation Type panel, click Install. This installs Splunk Enterprise in the default directory /Applications/Splunk.
  8. You are prompted to type the password that you use to login to your computer.
  9. When the installation finishes, a popup informs you that an initialization must be performed. Click OK.
  10. A terminal window appears and you are prompted to specify a userid and password to use with Splunk Enterprise.

    The password must be at least 8 characters in length. The cursor will not advance as you type.
    Make note of the userid and password. You will use these credentials to login Splunk Enterprise.

  11. A popup appears asking what you would like to do. Click Start and Show Splunk. The login page for Splunk Enterprise opens in your browser window.
  12. Close the Install Splunk window.

    The installer places a shortcut on the Desktop so that you can launch Splunk Enterprise from your Desktop any time.

tar file install

Use the .tgz file to perform a manual installation of Splunk Enterprise. When you install Splunk Enterprise with the .tgz file:

  • The service account is not created. If you want it to run Splunk Enterprise services with a specific user, you must create the user before starting the services.
  • The default installation directory is the current working directory when you untar the .tgz file. The tar extraction will place all files in a <working_directory>/Splunk folder.

To install Splunk Enterprise on Mac OS X:

  1. Place the <splunk_package_name.tgz> file into a folder.
  2. From the terminal, expand the tar file into the local directory using the tar command:
    tar xvzf splunk_package_name.tgz 
    
  3. Change directory to Splunk/bin and start the services.

Next steps

Now that you have installed Splunk Enterprise:

Are you looking for the universal forwarder installation?

The universal forwarder is a separate installation package, with its own installation procedures. To install a Splunk universal forwarder, see Install a *nix universal forwarder in the Universal Forwarder manual.

Upgrading?

If you are upgrading a Splunk Enterprise instance, see How to upgrade Splunk Enterprise.

Uninstall Splunk Enterprise

If you want to remove Splunk Enterprise, see Uninstall Splunk Enterprise.

Last modified on 18 November, 2020
Install on Linux   Run Splunk Enterprise as a different or non-root user

This documentation applies to the following versions of Splunk® Enterprise: 7.3.0, 7.3.1, 7.3.2, 7.3.3, 7.3.4, 7.3.5, 7.3.6, 7.3.7, 7.3.8, 7.3.9, 8.0.0, 8.0.1, 8.0.2, 8.0.3, 8.0.4, 8.0.5, 8.0.6, 8.0.7, 8.0.8, 8.0.9, 8.0.10


Was this topic useful?







You must be logged into splunk.com in order to post comments. Log in now.

Please try to keep this discussion focused on the content covered in this documentation topic. If you have a more general question about Splunk functionality or are experiencing a difficulty with Splunk, consider posting a question to Splunkbase Answers.

0 out of 1000 Characters