gnubyte / SplunkSetups

Simple Splunk setup scripts

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

SplunkSetups

Simple Splunk setup scripts for a variety of causes

Table of Contents

  1. Useful Splunk CLI commands
  2. Single Splunk All In One Instance Setup Script

cliUsefulCommands.sh

A list of commands found useful during deployment. Best for small teams or single server setups

🔥 For testing purposes only - not intended for production ready scripted deployments

When used in context, it is a good checklist for clearing fishbuckets, checking inputs, changing host level network configs for ease of splunk deployment server automation, etc.

Scripts Contents:

  • RHEL installation
  • add search peer
  • verifying who is running splunk
  • resetting splunk password
  • changing server hostname
  • change server config
  • list block devices attached to instance
  • report existing disk space used
  • Changing disk size, grow the partition if added scale
  • changing splunk host name
  • clear event data

singleAioInstance.sh

Installation via tgz files of Splunk instance. Current link represents splunk 7.x Run with elevated permissions, this will change the directories owner to Splunk and auto start the splunk instance. this will change the current password to changed

🔥 RHEL & Debian based distros supported at this time only

About

Simple Splunk setup scripts


Languages

Language:Shell 100.0%