Install Splunk to use Splunk Analytics for Hadoop
Note: Splunk Analytics for Hadoop is not supported on Windows.
To license Splunk Analytics for Hadoop on your system, you must download the Linux distribution of the latest Splunk version. You must configure your installation to run on a search head that resides on a *nix platform. You can run Splunk Analytics for Hadoop on any machine that meets the requirements for a search head. See System and software requirements. You can find the correct version to download here: http://www.splunk.com/download/splunk.
With your download, you get a temporary license for both Enterprise and Splunk Analytics for Hadoop. To license Splunk Analytics for Hadoop beyond the trial period, contact your salesperson for a license.
You will need to have a copy of a .tgz file of Splunk Enterprise on your search head when running searches with Splunk Analytics for Hadoop, so we recommend that you install using the tar file for easier configuration later. If you install Splunk Enterprise another way, you can add the necessary tar file when you set up the search head. See Set up your search head instance.
To learn more about installing or updating Splunk Enterprise on Linux, see Install on Linux in the Installation manual.
Before you get started, review the system requirements and configuration prerequisites. See System and Software requirements.
Tar file install
To install on a Linux system, expand the tarball into an appropriate directory using the
tar xvzf Splunk_package_name.tgz
The default install directory is
splunk in the current working directory. To install into
/opt/splunk, use the following command:
tar xvzf Splunk_package_name.tgz -C /opt
Note: When you install with a tarball:
- Some non-GNU versions of
tarmight not have the
-Cargument available. In this case, to install in
/optor place the tarball in
/optbefore you run the
tarcommand. This method works for any accessible directory on your machine's file system.
- Ensure that the disk partition has enough space to hold the uncompressed volume of the data you plan to keep indexed.
Ensure compatibility with Splunk Enterprise and Hadoop
Set up your search head instance
This documentation applies to the following versions of Splunk® Enterprise: 6.5.0, 6.5.1, 6.5.2, 6.5.3, 6.5.4, 6.5.5, 6.5.6, 6.5.7, 6.5.8, 6.5.9, 6.5.10, 6.6.0, 6.6.1, 6.6.2, 6.6.3, 6.6.4, 6.6.5, 6.6.6, 6.6.7, 6.6.8, 6.6.9, 6.6.10, 6.6.11, 6.6.12, 7.0.0, 7.0.1, 7.0.2, 7.0.3, 7.0.4, 7.0.5, 7.0.6, 7.0.7, 7.0.8, 7.0.9, 7.0.10, 7.0.11, 7.0.13, 7.1.0, 7.1.1, 7.1.2, 7.1.3, 7.1.4, 7.1.5, 7.1.6, 7.1.7, 7.1.8, 7.1.9, 7.1.10, 7.2.0, 7.2.1, 7.2.2, 7.2.3, 7.2.4, 7.2.5, 7.2.6, 7.2.7, 7.2.8, 7.2.9, 7.2.10, 7.3.0, 7.3.1, 7.3.2, 7.3.3, 7.3.4, 7.3.5, 8.0.0, 8.0.1, 8.0.2, 8.0.3, 8.0.4