Splunk Enterprise (free trial)¶

In this article

• Splunk: Core Features
• Deployment Features
• Getting Started After Splunk Deployment
• Ordering a Splunk Server via API

Splunk: Core Features¶

• Centralized Data Collection: Ensures the collection, aggregation, and indexing of data from a wide range of sources, including system logs, network devices, databases, IoT devices, and applications.
• Flexible Analysis: Supports real-time data processing and retrospective analysis. The toolkit includes a powerful query language (SPL) that allows for detailed searching, filtering, and correlation of data.
• Visualization and Reporting: Provides tools for creating interactive dashboards, charts, and reports, simplifying the presentation and interpretation of complex data.
• Monitoring and Anomaly Detection: Identifies deviations and critical events, providing timely alerts and automation of incident response.
• Integration and Scalability: Supports integration with popular management tools (e.g., ServiceNow, Kubernetes, AWS) and scales based on needs, from local installations to distributed cloud systems.
• Security Management: Used in SIEM (Security Information and Event Management) tasks for threat monitoring, incident analysis, and compliance requirements fulfillment.
• Extensible Ecosystem: Access to applications and plugins through Splunkbase allows tailoring the platform to specific tasks and use cases.

Deployment Features¶

• Installation Time: 15-20 minutes;
• Installation Technology: Containerized installation using the official Docker image splunk/splunk;
• Web Access:
  • Web interface port: 8000 (proxied to port 443 through Nginx+Certbot);
  • SSL/TLS access via domain name: splunk<server_id>.hostkey.in;
  • Nginx configuration file path: /data/nginx;
  • Mount points: /data;
  • Docker Compose configuration file: /root/splunk/compose.yml.
• Trial Period Duration: 60 days. A license must be purchased after the trial period ends.

Getting Started After Splunk Deployment¶

After paying for the order, a notification will be sent to the email address provided during registration confirming the server's readiness. This notification will include the VPS IP address, as well as login credentials for connection. Customers of our company manage equipment via the server management panel and API — Invapi.

Authentication data, which can be found in the Info >> Tags tab of the server management panel or in the email sent after deployment: - Link to access Splunk's web interface: in the tag webpanel; - Login: admin; - Password: Sent in an email upon server readiness after software deployment.

Ordering a Splunk Server via API¶

To install this software using the API, follow this instruction.