Ben's notes

Linux, Unix, network, radio...

User Tools

Site Tools


splunk_centos7

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revisionPrevious revision
Next revision
Previous revision
Last revisionBoth sides next revision
splunk_centos7 [2015/01/06 19:24] – [Install and configure Splunl] adminsplunk_centos7 [2015/01/06 19:48] – [Install and configure OS] admin
Line 25: Line 25:
   * Configure yum repo's.   * Configure yum repo's.
   * Configure time sync (chrony).   * Configure time sync (chrony).
-  * Configure firewall, open ports for splunk. +  * Configure [[firewalld_zone_service|firewall, open ports for splunk]]
-====Install and configure Splunl====+====Install and configure Splunk====
   * Download Splunk rpm.   * Download Splunk rpm.
   * Create splunk user:<code>groupadd splunk   * Create splunk user:<code>groupadd splunk
Line 32: Line 32:
   * Install Splunk:<code>rpm -i splunk-6.2.1-245427-linux-2.6-x86_64.rpm</code>   * Install Splunk:<code>rpm -i splunk-6.2.1-245427-linux-2.6-x86_64.rpm</code>
   * Accept license:<code>./splunk start --accept-license</code>   * Accept license:<code>./splunk start --accept-license</code>
-  * Create systemd service **/usr/lib/systemd/system/splunk.service**:<code> [Unit] +  * Create systemd service **/usr/lib/systemd/system/splunk.service**:<code>[Unit] 
- Description=Splunk +Description=Splunk 
- After=network.target +After=network.target 
-  + 
- [Service] +[Service] 
- RemainAfterExit=yes +RemainAfterExit=yes 
- ExecStart=/opt/splunk/bin/splunk start +ExecStart=/opt/splunk/bin/splunk start 
- ExecStop=/opt/splunk/bin/splunk stop +ExecStop=/opt/splunk/bin/splunk stop 
- ExecReload=/opt/splunk/bin/splunk restart +ExecReload=/opt/splunk/bin/splunk restart 
-  +User=splunk 
- [Install] +Group=splunk 
- WantedBy=multi-user.target</code>+ 
 +[Install] 
 +WantedBy=multi-user.target</code>
   * Enable auto start at boot:<code>systemctl enable splunk</code>   * Enable auto start at boot:<code>systemctl enable splunk</code>
splunk_centos7.txt · Last modified: 2021/10/09 15:14 by 127.0.0.1