Skip to main content

Installation of splunk and splunkforwarder

splunk and splunk forwarder installation

create a group and account for splunk user
---------------------------------------
/usr/sbin/groupadd -g 9991 splunk
/usr/sbin/adduser  -c "Splunk" -u 9991 -g 9991 -s /bin/bash -d /opt/splunk -m splunk
cp -r /etc/skel/ /opt/splunk
chown -R splunk:splunk /opt/splunk/

set the limit for the splunk
---------------------------------------

vi /etc/security/limits.d/99-mrll-splunk.conf

splunk  hard    nofile  20240
splunk  soft    nofile  10240
splunk  hard    nproc  10240
splunk  soft    nproc  2048


Set the environment path for the splunk home directory


echo "# The btool command does not have the right LD_LIBRARY_PATH...
LD_LIBRARY_PATH=:/opt/splunk/lib
export LD_LIBRARY_PATH

# also set the splunk home for the application
SPLUNK_HOME=/opt/splunk
export SPLUNK_HOME

# and set the path for the user
PATH=${PATH}:/opt/splunk/bin
export PATH
" >> /opt/splunk/.bashrc

Install the splunk

rpm -ivh splunk-6.5.2-67571ef4b87d-linux-2.6-x86_64.rpm
su - splunk -c '/opt/splunk/bin/splunk start --accept-license --answer-yes'
sudo /opt/splunk/bin/splunk enable boot-start -user splunk --accept-license --answer-yes


Install the splunk forwarder

rpm -ivh splunkforwarder-6.5.2-67571ef4b87d-linux-2.6-x86_64.rpm
su - splunk -c '/opt/splunkforwarder/bin/splunk start --accept-license --answer-yes'
 /opt/splunkforwarder/bin/splunk enable boot-start -user splunk --accept-license --answer-yes
Labels:

Comments

Post a Comment

Popular posts from this blog

Veritas cluster Interview Questions-2

Please go through questions and answers. Let me know if you have any doubt by leaving comment. Adding and removing cluster node  Q-1 How to add a node in an existing cluster? Ans:    Adding a node into an existing cluster is a multi steps process. 1:       Set up the hardware Before adding a node to an existing cluster, node must be physically connected with the cluster.       1: Connect the VCS private Ethernet controllers       2: Connect the node to the shared storage 2:       Install the VCS software in the node           Install the VCS software and install the license. 3:       Configure LLT and GAB Create the LLT & GAB configuration files (/etc/llthosts, /etc/llttab and /etc/gabtab) in the new node and update the files on the existing node. 4:       Add the node to an existing cluster We have to perform below given tasks in any of the exi...
Post a Comment
Read more

AUDIT.YML

 --- - name: Update auditd.conf and restart auditd service   hosts: all   become: yes   tasks:     - name: Ensure the line 'disk_full_action = halt' exists in auditd.conf       lineinfile:         path: /etc/audit/auditd.conf         regexp: '^disk_full_action'         line: 'disk_full_action = halt'         state: present       register: disk_full_action_changed     - name: Ensure the line 'disk_error_action = halt' exists in auditd.conf       lineinfile:         path: /etc/audit/auditd.conf         regexp: '^disk_error_action'         line: 'disk_error_action = halt'         state: prese...
Post a Comment
Read more

Learning Git

git config --global user.name  Yoganandhan Ganesan git config --global user.email gyoganandhan@gmail.com touch one.txt git status git add one.txt To remove the file in git  ------------------------------ git rm --cached one.txt To view the modified file difference  ------------------------------------ git diff To get the log ------------------- git log  git log --oneline --- git ignore file create ------------------------ touch .gitignore create branch -------------- git branch branch_name to change the branch ------------------- git checkout branch_name git checkout master ---------------- delete branch --------------- git branch -d branch_name ---------- to remvoe last commit  ------------------- git checkout . git checkout XXXXXX return to master with perivous position ----------------------------- git checkout master ------------------------------- we do not want to come pack to master ------------------------------------- git reset --hard ID(XXXXXX) git che...
Post a Comment
Read more