Skip to content

MMease/Splunk-Instance

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

2 Commits
 
 

Repository files navigation

Deploying Splunk Enterprise on an AWS Lightsail Linux Server

splunk-enterprise

Let's Get Started!!!

  1. First you need to create a AWS account (https://aws.amazon.com/free )
    • This is Completly Free and will cost you nothing.
    • Once Completed, Login as Root User to avoid Restrictions.

1  AWS Account Creation

  • Search " Lightsail " and select it.
  • Once there select "Create Instance"

3  Creating Linux Lightsail Instance

  • Seletct " Linux/Unix " for platform
  • Under blueprint, Select " Operating System (OS) only "
  • Select " Amazon Linux 2 "
  • Select "$12" option for the size
  • Then give your instance a name

4  Lightsail instance Size

5  LS Instance Name

  1. Create a Splunk Account

6  Splunk Enterprise download

6A  Splunk Linux download

  • Save The "wget" info. Yow will need it shortley.

6B  Command line info

Deploying the Splunk Instance on the Linux Sever

PLEASE USE NOTEPAD DURING THESE STEPS. MAKE IT SIMPLE FOR YOURSELF!
  1. Go back to your Lightsail Insance
    • Select "Connect using SSH" and a screen will display.

7A  Startup

Enter these commmands in order. I will Display images to show how it looks in the end.

  1. ls
  2. sudo su
  3. passwd
    • create a password you will remember and add to notes.

7B  Setup Part 1

  1. useradd splunk
  2. mkdir /opt/splunk
  3. cd /opt/
  4. Next you're gonna use the "wget" download from earlier to insatll Splunk.

7B  Setup Part 2

  1. Once the download is finished, you're gonna use a command to automatically accept the license.
  2. $sudo /opt/splunk/bin/splunk start --accept-license

7C  Accept License

Something Like this will show after accepting the license. Please Save it. The Splunk web interface is at http://ip-172-26-8-103.ec2.internal:8000

Logging into Splunk

1. First we will create a Firewall rule on the Lightsail Instance 2. Select Networking - click "Add rule". Add All TCP Traffic then create.

8  Creating Firewall Rule for Insance

  1. Take your public IP Address and edit it into the url given by the linux server.

9  Splunk Deployed

10  Splunk Home Screen

CONGRATS YOU HAVE DEPLOYED SPLUNK ENTERPRISE INSTANCE ON AWS

About

Downloaded a Splunk Instance onto a AWS Lightsail Linux Server.

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

 
 
 

Contributors