3.4 Installing Splunk on Windows
Video Activity
Join over 3 million cybersecurity professionals advancing their career
Sign up with
Required fields are marked with an *
or
Already have an account? Sign In »
Course
Difficulty
Beginner
Video Transcription
00:00
>> Hi, this is Natasha.
00:00
We're on Module 3 where we will be
00:00
installing Splunk on Windows using the GUI.
00:00
Using the command line is also an option and
00:00
instructions are available in
00:00
the supplemental materials for this course.
00:00
To get started, we're going to go to splunk.com,
00:00
and you'll need to log in,
00:00
in order to download Splunk.
00:00
Once you've logged in, you can go to Products,
00:00
Free Trials and Downloads,
00:00
and then scroll down on the page and
00:00
pick between Splunk free and Splunk enterprise.
00:00
Go ahead and click on Splunk free.
00:00
If you notice up here is directing us
00:00
to the Splunk enterprise download page.
00:00
When you download Splunk free,
00:00
you basically get a 60 day trial of Splunk enterprise.
00:00
That then changes to Splunk free after that time period.
00:00
In an earlier video,
00:00
we talked about some of the differences,
00:00
but there are limitations even for this trial version.
00:00
We'll scroll down here,
00:00
and I'm going to want to download this one.
00:00
But if you don't see the option you want,
00:00
there are other releases and you
00:00
may need to check your system requirements too.
00:00
Just go and click Download Now,
00:00
and we'll get a pop up here that we can
00:00
just save the installation package.
00:00
I went ahead and already did that to save us some time.
00:00
I've got it in my downloads folder here.
00:00
Just going to double-click that,
00:00
and we'll run the installation.
00:00
I'm going to click Accept License,
00:00
we'll go to Customize Options.
00:00
This is where it's going to put Splunk.
00:00
There are arguments for
00:00
removing this and keeping it as a shorter path.
00:00
But we're just going to leave as the default for now.
00:00
Then we install it as
00:00
the local system account
00:00
and come up with a username and password.
00:00
Go ahead and start the installation.
00:00
Installed. I'm going to go ahead and
00:00
click Finish here. Pretty simple.
00:00
Now, I mentioned how
00:00
the Splunk folder structure is really useful to learn.
00:00
When we installed this and went under Program Files,
00:00
Splunk, and if we want to,
00:00
we can go in and
00:00
check the server name that it's looking at.
00:00
The name of this host is being used as that.
00:00
We could go to local host port 8,000.
00:00
That's the default port used for it.
00:00
Or we could type in the name of this host for
00:00
that and we'll get to our Login Window.
00:00
I can use the account I just set
00:00
up and get logged
00:00
into our brand new installation of Splunk.
00:00
Something else I can do just to show you.
00:00
I have this browser,
00:00
this is on my computer,
00:00
not on the VM.
00:00
I'm just going to go to the same site.
00:00
I'm also able to log in.
00:00
You may need to play with
00:00
your firewall and network settings in
00:00
order to be able to talk between machines.
00:00
It's outside of the scope of this course.
00:00
But here we are,
00:00
here's our Splunk enterprise.
00:00
In our next video, we're going to be installing
00:00
a universal forwarder to get data
00:00
into this to start working with. Thanks for watching.
Up Next
3.5 Installing a Universal Forwarder
4.1 Data
4.2 Web Interface Tour
4.3 Ways to Get Data
4.4 Inputs Monitoring
Similar Content
