Install the Splunk App for Unix and Linux

This topic guides you through the steps required to install the Splunk App for Unix and Linux.

The installation package for the Splunk App for Unix and Linux contains a suite of packages:

• The Splunk App for Unix and Linux, which provides dashboards, reports, alerts, lookups, and macros for use with Splunk Web.
• The Supporting Add-on for Unix and Linux (SA-nix) - located in the Splunk App for Unix and Linux installation package (splunk_app_for_nix/install).

The Spunk Add-on for Unix and Linux (Splunk_TA_Nix) is available as a separate download from Splunkbase. It is no longer part of the Splunk App for Unix and Linux package.

You can install the Splunk App for Unix and Linux package using Splunk Web or from the command line on a full Splunk instance only. You cannot install the app onto a universal forwarder as you must have Splunk Web to use the app.

Install the Splunk App for Unix and Linux from within Splunk Web

To install the Splunk App for Unix and Linux from within Splunk Web:

1. Log into Splunk on the system on which you want to install the Splunk App for Unix and Linux.

Splunk loads the Home screen.

2. In the "Home" screen, click Find More Apps in the lower left-hand corner of the screen.

Splunk loads the Browse more apps screen.

3. In the "Browse more apps" screen, locate the Splunk App for Unix and Linux in the list, or type in "Splunk App for Unix and Linux" in the search box at the upper right hand corner of the screen.

4. In the "Splunk App for Unix and Linux" entry in the list, click the Install Free button.

Splunk installs the Splunk App for Unix and Linux, as well as the Splunk Add-on and Supporting Add-on for Unix and Linux.

5. Restart Splunk to complete the app installation.

6. Proceed to the "Log in and get started" page to continue using the app.

Install the Splunk App for Unix and Linux in Splunk Web from a downloaded file

Alternatively, you can download the Splunk App for Unix and Linux package and install it using Splunk Web:

1. Download the Splunk app for Unix and Linux from Splunk Apps and save it to an accessible location.

Note: The file downloads with a .tar.gz extension. Do not attempt to run this file.

2. Log into Splunk on the system which you want to install the Splunk App for Unix and Linux.

3. In the Home screen, click Manage Apps.

Splunk loads the "Apps" screen.

4. Click Install App from file.

Splunk loads the Upload app screen.

5. Click the Choose file button to locate the installation package you just downloaded.

6. Click Upload.

Splunk installs the Splunk App for Unix and Linux, as well as the Splunk Add-on and Supporting Add-on for Unix and Linux.

7. Restart Splunk to complete the app installation.

8. Proceed to the "Log in and get started" page to continue using the app.

Install the Splunk App for Unix and Linux from the command line

To install the Splunk App for Unix and Linux from the command line:

1. Download the Splunk app for Unix and Linux from Splunk Apps, if you haven't already.

Note: The file downloads with a .tar.gz extension. Do not attempt to run this file.

2. Unpack the file into an accessible location.

3. Copy the splunk_app_for_nix directory to $SPLUNK_HOME/etc/apps.

4. Restart Splunk to complete the app installation.

5. Proceed to the "Log in and get started" page to continue using the app.