You are here

Installing Splunk Enterprise on Kali Linux

Fred

This is a basic tutorial on how to install the free-trial version of Splunk Enterprise on your Kali Linux machine.  At the time of writing, splunk-9.3.0-51ccf43db5bd-linux-2.6-amd64.deb is the most recent kernal. Your install might be a different file name.

  1. Signup for Free trial of Splunk – https://www.splunk.com/en_us/download/splunk-enterprise.html
  2. Download the installation package. Choose .deb if you are using a Kali Linux machine.
    wget -O splunk-9.3.0-51ccf43db5bd-linux-2.6-amd64.deb “https://download.splunk.com/products/splunk/releases/9.3.0/linux/splunk-9.3.0-51ccf43db5bd-linux-2.6-amd64.deb”

    • The -O flag is how you specify the name to save the file as.
  3. Once download is complete, extract and install the downloaded .deb.
    sudo dpkg -i splunk-9.3.0-51ccf43db5bd-linux-2.6-amd64.deb
  4. After install is complete, check and install any deprecencies.
    sudo apt-get install -f
  5. Start the newly installed Splunk service Create your adminstrator username and password when prompted.
    sudo /opt/splunk/bin/splunk start
  6. Accept the License Agreement.
  7. Create your administrator username and password when prompted.
  8. After the service has finished loading, open your browser and type in the url http://kali:8000, unless otherwise indicated on your CLI.
  9. Log in with the username and password you recently created.

 

Related posts