After installing CentOS7 Live with GNOME, i finalized the install, then
yum update (as root).
After the update, installed Splunk 6.5 (download the RPM package on Splunk's website), install:
Downloads$ rpm -i splunk_package_name.rpm
Then needed to open up the firewall for some ports
firewall-cmd --permanent --zone=public --add-port=8000/tcp (this is for the webUI access)
firewall-cmd --permanent --zone=public --add-port=8089/tcp (this is for managing forwarders)
firewall-cmd --permanent --zone=public --add-port=9997/tcp (this is for data input from forwarders)
firewall-cmd --permanent --zone=public --add-port=514/udp (this is for the router's syslog to feed into splunk as an input)
Install homemonitor after installing Splunk via the app manager. Follow the prompts for the setup, you may have to go into data inputs, add, port 514 and in my case ensure source is set to Asus.
Profit.
yum update (as root).
After the update, installed Splunk 6.5 (download the RPM package on Splunk's website), install:
Downloads$ rpm -i splunk_package_name.rpm
Then needed to open up the firewall for some ports
firewall-cmd --permanent --zone=public --add-port=8000/tcp (this is for the webUI access)
firewall-cmd --permanent --zone=public --add-port=8089/tcp (this is for managing forwarders)
firewall-cmd --permanent --zone=public --add-port=9997/tcp (this is for data input from forwarders)
firewall-cmd --permanent --zone=public --add-port=514/udp (this is for the router's syslog to feed into splunk as an input)
Install homemonitor after installing Splunk via the app manager. Follow the prompts for the setup, you may have to go into data inputs, add, port 514 and in my case ensure source is set to Asus.
Profit.
No comments:
Post a Comment