InfoSec Blog

In the first two parts of this series we discussed installing the SuSe Linux operating system. The first in the series took you through the first half of the installation while the second finished the install off. The install served to get you a base installation of SuSe Linux. If you have a default build for SuSe that you prefer then by all means use it just make sure to open the appropriate firewall ports for Splunk and administering the system (22 and 443 to start with more to be added as we go into parts 4 and 5 of this series). With that said let's setup a basic Splunk instance on the server. Now that the Linux operating system is installed it is time to install the latest instance of Splunk...

This is the second part of the installation of the operating system for a Splunk deployment. the first portion of the installation got us through the longest part of the installation. We have our partitions in place and are ready to move on to the next steps and finish the installation.

For the purpose of this blog series I am going to go through installing the operating system for Splunk. The operating system that I have chosen in Suse Enterprise 10. My goal in this blog series is to provide a step by step installation guide and configuration guide. While you will not be either a Splunk expert or a Linux expert after reading this series you will be able to forward, maintain, and take care of the logs within your environment. I chose to use Suse for the installation for two reasons. First I wanted the smallest footprint from the operating system as I could achieve so Linux was the obvious choice. Second, and more specifically, I chose Suse because of my familiarity with the OS and the ability to use Yast for installing additional packages if needed. this could be tweaked for other Linux installations. Installing the operating system. I didn't take the time to add fluff or colorful commentary to this installation guide. It is for those out there that want a straightforward, get it done, guide.