Now we'll cover a quick overview of installing Splunk on your personal machine so you can try it out. To know the real nitty-gritty of each platform, deploying in a multi-machine architecture, and for anything more complicated than hitting "Next", check out the Installation Manual on our documentation site.
Platforms: most flavors of Windows, MacOSX, and Linux, as well as specific FreeBSD and AIX versions.
Supported web browsers: most versions of Firefox, Internet Explorer, and Safari.
Hardware: basic rule: don't have a crap machine. Crap machines equal crap experience. A $1000 Windows laptop or a $2000 Mac laptop is good enough to try things out. When you're really ready to deploy Splunk, you'll want multi-core machines with 8GB, fast disks, and 64-bit OS. If you've got Windows95 on a 1MB x486, please go away.
When you download Splunk for the first time, you get all of the Enterprise features of Splunk for 60 days and you can index up to 500 megabytes of data per day. At anytime you can convert to a perpetual Free License or purchase an Enterprise License to continue using the expanded enterprise functionality, namely: multiple user accounts, distributed architecture and deployment for greater scaling, summary indexing for faster reporting, and scheduled searches and alerts.
Below we'll briefly walk-through the graphic installers for Windows and MacOS. For commandline installations, installations on other platforms, or if you encounter problems, refer to the Splunk installation manual.
The Windows installer is an MSI file.
Below are instructions for the Graphical installation using the DMG file:
Refer to the installation manual for uninstalling. Tarzan sad.
Splunk can run as any user on the local system, but you'll obviously want to make sure that that user has access to the data you want to use.
You can start and stop the following Splunk processes via the Windows Services Manager:
You can start Splunk by opening a shell and going to the $SPLUNK_HOME/bin directory, where $SPLUNK_HOME is the directory into which you installed Splunk (on windows $SPLUNK_HOME defaults to "\Program Files\Splunk"), and typing in:
You can stop or restart Splunk similarly:
After you start Splunk and accept the license agreement, access the Splunk web interface at
If you're not running Splunk on same machine as you're browsing on, or if you're using a different port than the default (8000), change the values as necessary.
If you're using the free license, there will be no logon page; otherwise, login with the default username ("admin") and password ("changeme").