ABOUT THE TOPIC
This topic describes the installation of Splunk. The installed instance can be integrated with Virsec Security Platform (VSP) to view incidents, attacks and threats, as well as trends depicted in VSP CMS.
NOTE:
Splunk is a third-party software. The installation steps provided aid the user with the setup process, in cases where an instance does not exist. The sections in this topic provide Splunk installation in Ubuntu environments only. If any other methods are preferred, follow the installation guidelines suggested by Splunk
VM CREATION
Create a new VM for Splunk installation. The procedure for Splunk installation in an Ubuntu environment is described in this document. Refer to the URL: http://docs.splunk.com/Documentation/Splunk/7.1.2/Capacity/Referencehardware
for Splunk installation criteria.