{"id":28,"date":"2014-11-22T12:00:00","date_gmt":"2014-11-22T11:00:00","guid":{"rendered":"https:\/\/test.n3oxid.fr\/?p=28"},"modified":"2021-04-18T21:09:21","modified_gmt":"2021-04-18T19:09:21","slug":"installation-de-splunk-sous-gnu-linux-debian","status":"publish","type":"post","link":"https:\/\/www.n3oxid.fr\/?p=28","title":{"rendered":"Installation de Splunk sous GNU\/Linux Debian"},"content":{"rendered":"\n<h2 class=\"wp-block-heading\">R\u00e9cup\u00e9ration du paquet Splunk<\/h2>\n\n\n\n<p>Se rendre sur le portail&nbsp;<a href=\"http:\/\/www.splunk.com\/\">Splunk<\/a>&nbsp;afin de&nbsp;<a href=\"https:\/\/www.splunk.com\/page\/sign_up\">cr\u00e9er un compte<\/a>.<br>Une fois le compte cr\u00e9er, s&#8217;authentifier puis se rendre sur la page des&nbsp;<a href=\"http:\/\/www.splunk.com\/download\">t\u00e9l\u00e9chargements<\/a>.<br>T\u00e9l\u00e9charger le paquet correspondant \u00e0 votre syst\u00e8me d&#8217;exploitation: dans notre cas il s&#8217;agit de&nbsp;<em>splunk-6.1.4-233537-linux-2.6-amd64.deb<\/em>.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">V\u00e9rification du paquet Splunk<\/h2>\n\n\n\n<p>T\u00e9l\u00e9charger le fichier MD5 correspondant au paquet pr\u00e9c\u00e9demment t\u00e9l\u00e9charger afin de v\u00e9rifier l&#8217;int\u00e9grit\u00e9 du t\u00e9l\u00e9chargement (via un&nbsp;<em>md5sum<\/em>).<br>Une fois le paquet et le fichier MD5 dans le m\u00eame r\u00e9pertoire, lancer la v\u00e9rification&nbsp;:<\/p>\n\n\n\n<pre class=\"wp-block-preformatted\"># md5sum -c splunk-6.1.4-233537-linux-2.6-amd64.deb.md5\nsplunk-6.1.4-233537-linux-2.6-amd64.deb: OK\n<\/pre>\n\n\n\n<h2 class=\"wp-block-heading\">Installation de Splunk<\/h2>\n\n\n\n<p>Installer Splunk&nbsp;:<\/p>\n\n\n\n<pre class=\"wp-block-preformatted\"># dpkg -i splunk-6.1.4-233537-linux-2.6-amd64.deb\n<\/pre>\n\n\n\n<p>D\u00e9marrer Splunk&nbsp;:<\/p>\n\n\n\n<pre class=\"wp-block-preformatted\"># \/opt\/splunk\/bin\/splunk start\n<\/pre>\n\n\n\n<p>Accepter la licence&nbsp;:<\/p>\n\n\n\n<pre class=\"wp-block-preformatted\">                    SPLUNK SOFTWARE LICENSE AGREEMENT\n\nTHIS SPLUNK SOFTWARE LICENSE AGREEMENT (\"AGREEMENT\") GOVERNS THE INSTALLATION\nAND USE OF THE SPLUNK SOFTWARE DESCRIBED HEREIN. THE INSTALLATION AND USE OF THE\nSPLUNK SOFTWARE WILL BE SUBJECT TO THE ORDER DOCUMENT(S).\n\nYOU WILL BE REQUIRED TO INDICATE YOUR AGREEMENT TO THESE TERMS AND CONDITIONS IN\nORDER TO DOWNLOAD THE SOFTWARE, REGISTER THE SOFTWARE WITH SPLUNK AND OBTAIN\nLICENSE KEYS NECESSARY TO COMPLETE THE INSTALLATION PROCESS FOR THE SOFTWARE.\nBY CLICKING ON THE \"YES\" BUTTON OR OTHER BUTTON OR MECHANISM DESIGNED TO\nACKNOWLEDGE AGREEMENT TO THE TERMS OF AN ELECTRONIC COPY OF THIS AGREEMENT, OR\nDOWNLOADING OR INSTALLING THE SOFTWARE, OR USING ANY MEDIA THAT CONTAINS THE\nSOFTWARE, YOU ARE CONSENTING TO BE BOUND BY THIS AGREEMENT, INCLUDING ALL TERMS\nINCORPORATED BY REFERENCE. THIS AGREEMENT IS ENFORCEABLE AGAINST ANY PERSON OR\nENTITY THAT USES THE SOFTWARE AND ANY PERSON OR ENTITY THAT USES THE SOFTWARE ON\nANOTHER PERSON'S OR ENTITY'S BEHALF. YOU AGREE THAT THIS AGREEMENT IS EQUIVALENT\nTO ANY WRITTEN NEGOTIATED AGREEMENT SIGNED BY YOU.  IF YOU AGREE TO THESE TERMS\nON BEHALF OF A BUSINESS OR A GOVERNMENT AGENCY, DEPARTMENT OR INSTRUMENTALITY,\nYOU REPRESENT AND WARRANT THAT YOU HAVE AUTHORITY TO BIND THAT BUSINESS TO THIS\nAGREEMENT, AND YOUR AGREEMENT TO THESE TERMS WILL BE TREATED AS THE AGREEMENT OF\nTHE BUSINESS.  IN THAT EVENT, \"YOU\" AND \"YOUR\" REFER HEREIN TO THAT BUSINESS.\n\nTHIS SOFTWARE IS BEING LICENSED AND NOT SOLD TO YOU.  SPLUNK PERMITS YOU TO\nDOWNLOAD, INSTALL AND USE THE FUNCTIONALITY OR FEATURES OF THE SOFTWARE ONLY IN\nACCORDANCE WITH THE TERMS OF THIS AGREEMENT.\n\n1.  DEFINITIONS.   Capitalized terms not otherwise defined herein can be found\nin Exhibit A.\n\n2.  TERM. This Agreement will be in effect perpetually unless earlier\nterminated as provided herein (the \"Term\").\n\n3.  LICENSE GRANTS.  Subject to your compliance with the terms and conditions\nof this Agreement, including (as applicable) your timely payment of license fees\nset forth in the applicable Order Document (the \"License Fees\"), Splunk grants\nto you the following nonexclusive, worldwide, nontransferable, nonsublicensable,\nrevocable, limited licenses during the Term (or such other period of time\nprovided in your Order Document) to use solely for your Internal Business\nPurpose:\n\n3.1.  the Purchased Software to index no more than the peak daily volume of\nuncompressed data set forth in your Order Document for which you have paid the\napplicable License Fees (the \"Purchased Peak Daily Volume\");\n\n3.2.  the Purchased Software to analyze and visualize data from the number of\nNodes or the Fractional Use of Nodes identified in the applicable Order\nDocument;\n\n3.3.  the Splunk Extensions solely for use with the Software;\n\n3.4.  the Purchased Software for Data Duplication; and\n\n3.5.  the Splunk API solely for the purpose of developing Extensions for use\nwith the Software (collectively, \"Your Extensions\"). You agree to assume full\nresponsibility for the performance of Your Extensions, and shall indemnify, hold\nharmless, and defend Splunk (including all of its officers, employees,\ndirectors, subsidiaries, representatives, Affiliates and agents) and Splunk's\nlicensors and suppliers from and against any claims or lawsuits, including\nattorney's fees and expenses, that arise or result from Your Extensions. You\nretain title to and copyright for Your Extensions, subject to Splunk's title to\nand copyright for the Splunk Materials as specified in Section 6 below.\n\n3.6.  Some software components may be distributed with the Software.  If\nseparate license terms accompany those components, such separate license terms\napply to Your use of such components.\n\n4.  FREE SPLUNK SOFTWARE AND EVALUATION SOFTWARE LICENSES.\n\n4.1.  Free Splunk Software License. Subject to your compliance with the terms\nand conditions of this Agreement, Splunk grants to you a non-exclusive,\nworldwide, fully-paid up copyright license to use the Free Splunk Software\nsubject to the following conditions: (i) you may index no more than 500MB of\nuncompressed data per day (the \"Free Peak Daily Volume\") and (ii) you may use\nthe Free Splunk Software only for your Internal Business Purposes. You\nacknowledge that the Free Splunk Software may be limited in features, functions,\nor have other limitations not present in the Purchased Software or Evaluation\nSoftware.\n\n4.2.  Evaluation Software Trial License.  Notwithstanding Section 2 of this\nAgreement, if the applicable Order Document is limited to a free trial license\nof the Evaluation Software or you are otherwise provided a free trial license of\nthe Evaluation Software, then the term will be limited to the free trial period\nspecified in the Order Document or with the license key (the \"Trial Period\").\nThis Agreement and any license rights granted hereunder will automatically\nterminate at the end of the Trial Period, and there will be no renewal term. You\nmay install and use the Evaluation Software solely (i) to index no more than the\namount of uncompressed data per day provided in such Order Document or with the\nlicense key (the \"Trial Peak Daily Volume\") or to analyze and visualize data\nfrom no more than five (5) Nodes, as applicable; and (ii) for the purpose of\ndetermining whether to purchase a commercial license to the Purchased Software,\nand not for any revenue generation, commercial activity or other productive\nbusiness or developmental purpose. Any license keys provided for a free trial\nwill automatically expire and may cause the Evaluation Software to become\nnon-operational at the end of the Trial Period. If You wish to use the\nEvaluation Software after the Trial Period expires, You agree to purchase the\napplicable license.  By continuing to use the Evaluation Software after the\nTrial Period expires, You acknowledge and agree that You shall be responsible\nfor any and all license fees required for such use. Splunk reserves the right to\nexercise its rights under Section 9 of this Agreement to ensure compliance with\nthis Section 4.2.\n\n4.3.  Limitations.  To the extent that any provision of this Section 4 is in\nconflict with any other term or conditions of this Agreement, this Section 4\nshall supersede such other terms and conditions with respect to the Free Splunk\nSoftware or Evaluation Software, but only to the extent necessary to resolve the\nconflict.  Splunk reserves the right to terminate your license to use the Free\nSplunk Software or Evaluation Software at any time in its sole discretion.\nProvisions in this Agreement regarding License Fees, maintenance and support,\nwarranty and indemnification, including, without limitation, Sections 7, 8, 10,\n11, and 13, will not apply to Free Splunk Software or Evaluation Software.\n\n5.  SOFTWARE RESTRICTIONS. You agree not to (a) use the Splunk Materials or\nYour Extensions except as expressly authorized in this Agreement and your Order\nDocument; (b) copy the Software (except as required to run the Software and for\nreasonable backup purposes); (c) modify, adapt, or create derivative works of\nthe Software; (d) rent, lease, loan, resell, transfer, sublicense (including,\nbut not limited to, offering any of the functionality of the Splunk Materials or\nYour Extensions on a service provider, hosted or time sharing basis) or\ndistribute the Splunk Materials or Your Extensions to any third party; (e)\ndecompile, disassemble or reverse-engineer the Software or otherwise attempt to\nderive the Software source code; (f) disclose to any third party the results of\nany benchmark tests or other evaluation of the Software; or (g) authorize any\nthird parties to do any of the above.  Any consultant, contractor, or agent\nhired to perform services for you may operate the Software on your behalf under\nthese terms and conditions, provided that: (v) you are responsible for ensuring\nthat any such third party agrees to abide by and fully comply with the terms of\nthis Agreement on the same basis as applicable to you; (x) such use is only in\nconnection with your Internal Business Purpose; (y) such use does not represent\nor constitute an increase in the scope of the licenses provided hereunder; and\n(z) you remain fully liable for any and all acts or omissions by such third\nparties related to this Agreement.  The Software will be configured to display\nwarnings, reduce available functionality, and\/or cease searching data when the\nPeak Daily Volume is reached.  Any violation of this Section shall be a material\nbreach of this Agreement subject to immediate termination of this Agreement for\nwhich no notice from Splunk shall be required.\n\n6.  OWNERSHIP. Splunk, its suppliers and\/or its licensors own all worldwide\nright, title and interest in and to the Splunk Materials, including all\nworldwide patent rights (including patent applications and disclosures);\ncopyright rights (including copyrights, copyright registration and copy rights\nwith respect to computer software, software design, software code, software\narchitecture, firmware, programming tools, graphic user interfaces, reports,\ndashboard, business rules, use cases, screens, alerts, notifications, drawings,\nspecifications and databases); trademark rights (including the goodwill\nassociated therewith); moral rights; trade secrets and other rights with respect\nto confidential or proprietary information; know-how; other rights with respect\nto inventions, discoveries, ideas, improvements, techniques, formulae,\nalgorithms, processes, schematics, testing procedures, technical information and\nother technology; and any other intellectual and industrial property rights,\nwhether or not subject to registration or protection; and all rights under any\nlicense or other arrangement with respect to the foregoing (the \"Intellectual\nProperty Rights\"). Except as expressly stated in this Agreement, Splunk does not\ngrant you any Intellectual Property Rights in the Splunk Materials, and all\nright, title, and interest in and to all copies of the Splunk Materials not\nexpressly granted herein remain with Splunk, its suppliers and\/or its licensors.\nThe Splunk Materials are copyrighted and protected by the laws of the United\nStates and other countries, and international treaty provisions. You may not\nremove or obscure any copyright, trademark, and\/or any other intellectual\nproperty or other proprietary notices from the Splunk Materials.\n\n7.  PURCHASED SOFTWARE LICENSE FEES. In order to access and use the Purchased\nSoftware, you are required to pay to Splunk the License Fees, which are due\nthirty (30) days from the date of the Splunk invoice. The License Fees will be\ndue and payable in accordance with the terms set forth in your Order Document.\nAny failure to pay the License Fees in accordance with an Order Document may\nresult in automatic revocation and termination of this Agreement and all rights\nand licenses granted hereunder in Splunk's sole discretion.  All License Fees\nare non-refundable once paid.  Any fees and payment terms for Splunk Extensions\nwill be identified on your Order Document or on apps.splunk.com.\n\n8.  MAINTENANCE AND SUPPORT. Subject to your payment of the applicable annual\nmaintenance and support fees set forth in your Order Document (the \"Support\nFees\"), which are due thirty (30) days from the date of the Splunk invoice,\nSplunk will provide the level of Support for the Purchased Software identified\nin your Order Document and in accordance with the support and maintenance terms\nand conditions set forth on Exhibit B (the \"Support and Maintenance Terms and\nConditions\"), attached hereto and made a part hereof.  Splunk is not obligated\nto support, update or upgrade the Evaluation Software or the Free Splunk\nSoftware.\n\n9.  SOFTWARE VERIFICATION AND AUDIT. At Splunk's written request, you will\nfurnish Splunk with a certification signed by your authorized representative\nverifying that the Purchased Software or the Evaluation Software, as applicable,\nis being used in accordance with the terms and conditions of this Agreement and\nthe applicable Order Document. Upon at least ten (10) days' prior written notice\nand subject to applicable reasonable or national security requirements, if any,\nSplunk may audit your use of the Purchased Software or the Evaluation Software\nto ensure that you are in compliance with the terms of this Agreement and the\napplicable Order Document. Any such audit will be conducted during regular\nbusiness hours at your facilities, will not unreasonably interfere with your\nbusiness activities and will be in compliance with your reasonable security\nprocedures. You will provide Splunk with reasonable access to the relevant\nrecords and facilities for the Purchased Software or the Evaluation Software. If\nan audit reveals that you have exceeded the Peak Daily Volume or the scope of\nyour license grant during the period audited, then Splunk will invoice you, and\nyou will promptly pay Splunk any underpaid fees based on Splunk's price list in\neffect at the time the audit is completed. If the excess daily volume usage\nexceeds ten percent (10%) of the Peak Daily Volume, then you will also pay\nSplunk's reasonable costs of conducting the audit.  This Section shall survive\nexpiration or termination of this Agreement for a period of three (3) years.\n\n10.  PURCHASED SOFTWARE WARRANTY. Splunk warrants that for a period of thirty\n(30) days after the earlier of delivery of the Purchased Software or\nregistration of the Purchased Software with Splunk, the Purchased Software will\nsubstantially achieve any material function described in documentation for the\nPurchased Software published by Splunk. As Splunk and its Affiliates, licensors\nand suppliers' sole liability and your sole remedy for any failure of the\nPurchased Software to conform to this warranty, Splunk will repair or replace\n(at Splunk's option) your copy of the Purchased Software.  You acknowledge that\nthe Evaluation Software and the Free Splunk Software are provided on an \"as is\"\nbasis, and Splunk disclaims any warranty or liability obligations to you of any\nkind with respect to the Evaluation Software or the Free Splunk Software.\n\n11.  WARRANTY DISCLAIMER. EXCEPT AS SET FORTH IN SECTION 10 ABOVE, SPLUNK, ITS\nAFFILIATES, LICENSORS AND SUPPLIERS PROVIDE THE SPLUNK MATERIALS AS-IS AND\nEXPRESSLY DISCLAIM ANY AND ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING,\nWITHOUT LIMITATION, THE IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A\nPARTICULAR PURPOSE, NONINFRINGEMENT, QUIET ENJOYMENT, AND INTEGRATION, AND\nWARRANTIES ARISING OUT OF COURSE OF DEALING OR USAGE OF TRADE. YOU AGREE THAT,\nAS BETWEEN YOU AND SPLUNK, YOU ARE RESPONSIBLE FOR THE ACCURACY AND QUALITY OF\nYOUR DATA INPUT INTO ANY SPLUNK MATERIALS.  BECAUSE THIS DISCLAIMER OF WARRANTY\nMAY NOT BE VALID IN SOME STATES OR JURISDICTIONS, THE ABOVE DISCLAIMER MAY NOT\nAPPLY TO YOU.\n\n12.  LIMITATION OF LIABILITY. TO THE EXTENT PERMITTED BY APPLICABLE LAW,\nSPLUNK'S TOTAL CUMULATIVE LIABILITY TO YOU, FROM ALL CAUSES OF ACTION AND ALL\nTHEORIES OF LIABILITY, WILL BE LIMITED TO AND WILL NOT EXCEED THE AMOUNTS PAID\nBY YOU TO SPLUNK UNDER THE APPLICABLE ORDER DOCUMENT GIVING RISE TO SUCH\nLIABILITY IN THE TWELVE (12) MONTHS PRIOR TO THE EVENT GIVING RISE TO SUCH\nLIABILITY. IN NO EVENT WILL SPLUNK BE LIABLE TO YOU FOR ANY SPECIAL, INDIRECT,\nINCIDENTAL, CONSEQUENTIAL OR PUNITIVE DAMAGES (INCLUDING LOSS OF USE, DATA, OR\nPROFITS, BUSINESS INTERRUPTION, OR COSTS OF PROCURING SUBSTITUTE SPLUNK\nMATERIALS OR SUBSTITUTE SUPPORT) ARISING OUT OF OR IN CONNECTION WITH THIS\nAGREEMENT OR THE USE OR PERFORMANCE OF THE SPLUNK MATERIALS OR THE SUPPORT,\nWHETHER SUCH LIABILITY ARISES FROM CONTRACT, WARRANTY, TORT (INCLUDING\nNEGLIGENCE), STRICT LIABILITY OR OTHERWISE, AND WHETHER OR NOT SPLUNK HAS BEEN\nADVISED OF THE POSSIBILITY OF SUCH LOSS OR DAMAGE. THE PARTIES HAVE AGREED THAT\nTHESE LIMITATIONS WILL SURVIVE AND APPLY EVEN IF ANY REMEDY IS FOUND TO HAVE\nFAILED OF ITS ESSENTIAL PURPOSE. WITHOUT LIMITING THE FOREGOING, SPLUNK WILL\nHAVE NO LIABILITY OR RESPONSIBILITY FOR ANY BUSINESS INTERRUPTION OR LOSS OF\nDATA ARISING FROM THE AUTOMATIC TERMINATION OF THE LICENSE RIGHTS GRANTED HEREIN\nAND ANY ASSOCIATED CESSATION OF THE FUNCTIONS OF THE SPLUNK MATERIALS. BECAUSE\nSOME STATES OR JURISDICTIONS DO NOT ALLOW LIMITATION OR EXCLUSION OF\nCONSEQUENTIAL OR INCIDENTAL DAMAGES, THE ABOVE LIMITATION MAY NOT APPLY TO YOU.\nSplunk is acting on behalf of its Affiliates, licensors and suppliers for the\npurpose of disclaiming, excluding and limiting obligations, warranties and\nliability, but in no other respects and for no other purposes.\n\n13.  PURCHASED SOFTWARE INDEMNITY. Provided your use of the Purchased Software\nwas in accordance with the terms of this Agreement, Splunk will defend,\nindemnify and hold you harmless from and against any loss, damage, liability or\ncost (including reasonable attorneys' fees) resulting from any third party claim\nthat the Purchased Software infringes or violates any third party's copyright,\ntrademark, rights; provided that you promptly notify Splunk in writing of any\nand all such claims. In the event of any loss, damage, liability or cost for\nwhich Splunk is obligated to indemnify you hereunder, Splunk shall have sole\ncontrol of the defense and all related settlement negotiations, and you shall\nreasonably cooperate with Splunk in the defense and\/or settlement thereof at\nSplunk's expense; provided that you may participate in such defense using your\nown counsel, at your own expense. The indemnification obligations set forth in\nthis Section constitute your sole remedy, and Splunk's sole liability, with\nrespect to any claims that the Purchased Software infringes any third party's\nintellectual property rights\n\n14.  CONFIDENTIAL INFORMATION.\n\n14.1.  Confidential Information.  \"Confidential Information\" means any\ntechnical or business information, ideas, materials, know-how or other subject\nmatter that is disclosed by one party to the other party that: (A) if disclosed\nin writing, is marked \"confidential\" or \"proprietary\" at the time of such\ndisclosure; (B) if disclosed orally, is identified as \"confidential\" or\n\"proprietary\" at the time of such disclosure, and is summarized in a writing\nsent by the disclosing party to the receiving party within thirty (30) days\nafter any such disclosure; or (C) under the circumstances, a person exercising\nreasonable business judgment would understand to be confidential or proprietary.\n\"Confidential Information\" of Splunk shall include the Splunk Materials, source\ncode and the license keys to download the Software.\n\n14.2.  Use and Disclosure Restrictions.  The party receiving Confidential\nInformation (\"Recipient\") agrees: (i) to maintain the Confidential Information\nof the party disclosing such information (the \"Discloser\") in the strictest of\nconfidence; (ii) not to disclose such Confidential Information to any third\nparties; and (iii) not to use any such Confidential Information for any purpose\nother than in furtherance of this Agreement and the activities described herein.\nRecipient will treat Confidential Information of the Discloser with the same\ndegree of care as it accords to its own Confidential Information, but in no\nevent with less than reasonable care. Recipient may disclose the Confidential\nInformation of Discloser to its directors, officers, employees and consultants\n(collectively, \"Representatives\") who have a bona fide need to know such\nConfidential Information, but solely to the extent necessary to pursue the\nactivities described herein and for no other purpose; provided that each such\nRepresentative first executes a written agreement (or is otherwise already bound\nby a written agreement) that contains use and nondisclosure restrictions at\nleast as protective of the other party's Confidential Information as those set\nforth herein.\n\n14.3.  Exclusions. The obligations of Recipient under Section 14.2 shall not\napply to any Confidential Information which: (a) is now or thereafter becomes\ngenerally known or available to the public, through no act or omission on the\npart of Recipient (or any of its Representatives, affiliates, or agents) or any\nthird party subject to any use or disclosure restrictions with respect to such\nConfidential Information; (b) was known by or lawfully in the possession of\nRecipient, prior to receiving such information from Discloser, without\nrestriction as to use or disclosure; (c) is rightfully acquired by Recipient\nfrom a third party who has the right to disclose it and who provides it without\nrestriction as to use or disclosure; or (d) is independently developed by\nRecipient without access to any Confidential Information of Discloser.\n\n14.4.  Required Disclosures.  The provisions of Section 14.2 will not restrict\nRecipient from disclosing Discloser's Confidential Information to the extent\nrequired by any law or regulation or compelled by a court or administrative\nagency of competent jurisdiction.\n\n14.5.  Independent Development. Recipient reserves the right to develop and\nmarket any technology, products or services or pursue business opportunities\nthat compete with or are similar to those disclosed by Discloser under this\nAgreement without the use of the Discloser's Confidential Information. Nothing\ncontained in this Agreement shall prohibit or restrict Recipient from employing\ngeneral ideas, concepts or techniques which may be retained in the unaided human\nmemory by Recipient personnel in the course of their review of the Confidential\nInformation (but without any attempt to memorize such information). The\nforegoing sentence shall not, however, grant Recipient any rights under any\npatents or copyrights.\n\n14.6.  Return or Destruction of Confidential Information.  Upon termination of\nthe Agreement or support and maintenance, Recipient will promptly return to\nDiscloser, or at Discloser's option, destroy, all tangible items and embodiments\ncontaining or consisting of Discloser's Confidential Information and all copies\nthereof and provide written certification of such destruction or return by an\nauthorized person.\n\n15.  TERMINATION. You may terminate this Agreement at any time by providing to\nSplunk a written statement signed by your authorized representative notifying\nSplunk that you are terminating the Agreement. If you are not a U.S. Government\nagency, department, or instrumentality, upon thirty (30) days notice, Splunk may\nterminate this Agreement (and your license rights) upon notice in the event that\nyou breach any provision of this Agreement and have not cured the breach during\nsuch notice period.  Notwithstanding the foregoing, a material breach of any\nlicense granted to you shall be grounds for immediate termination.  If you are a\nU.S. Government agency, department, or instrumentality, termination terms and\nconditions shall be governed by 48 C.F.R. \u00a7 52.212-4.  Upon any expiration or\ntermination of this Agreement, the rights and licenses granted hereunder will\nautomatically terminate, and you agree to immediately cease using the Splunk\nMaterials and to return or destroy all copies of the Splunk Materials, including\nany documentation, and other Splunk Confidential Information in your possession\nor control and certify in writing the completion of such return or destruction\nin accordance with Section 14.6. In the event of termination of this Agreement,\nSplunk will have no obligation to refund any License Fees, Support Fees, or\nother fees received from you during the Term. Section 1 (Definitions), Section\n3.5 (solely with respect to indemnity), Section 6 (Ownership), Section 9\n(Software Verification and Audit), Section 11 (Warranty Disclaimer), Section 12\n(Limitation of Liability), Section 13 (Purchased Software Indemnity), Section 15\n(Termination) and Sections 16 (Severability) through 22 (General) shall survive\ntermination of this Agreement\n\n16.  SEVERABILITY. Unless otherwise provided herein, all rights and remedies,\nwhether conferred hereunder or by any other instrument or law, will be\ncumulative and may be exercised singularly or concurrently. The failure by\neither party to enforce any provisions of this Agreement will not constitute a\nwaiver of any other right hereunder or of any subsequent enforcement of that or\nany other provisions. The terms and conditions stated herein are declared to be\nseverable. If a court of competent jurisdiction holds any provision of this\nAgreement invalid or unenforceable, the remaining provisions of the Agreement\nwill remain in full force and effect, and the provision affected will be\nconstrued so as to be enforceable to the maximum extent permissible by law.\n\n17.  EXPORT. You will comply fully with all relevant export laws and\nregulations of the United States and any other country (\"Export Laws\") where you\nuse any of the Splunk Materials. You certify that you are not on any of the\nrelevant U.S. Government Lists of prohibited persons, including but not limited\nto the Treasury Department's List of Specially Designated Nationals, and the\nCommerce Department's List of Denied Persons or Entity List.  You further\ncertify that you shall not export, re-export, ship, transfer or otherwise use\nthe Splunk Materials in any country subject to an embargo or other sanction by\nthe United States, including Iran, Syria, Cuba, Sudan and North Korea and that\nyou shall not use the Splunk Materials for any purpose prohibited by the Export\nLaws, including, but not limited to, nuclear, chemical, missile or biological\nweapons related end uses.\n\n18.  GOVERNMENT END USER RIGHTS.  You acknowledge that all Splunk Materials\nwere developed entirely at private expense and that no part of the Splunk\nMaterials was first produced in the performance of a Government contract.  You\nagree that all Splunk Materials and any derivatives thereof are \"Commercial\nItems\" as defined in 48 C.F.R. \u00a7 2.101, and if You are a U.S. Government agency\nor instrumentality or if You are providing all or any part of the Splunk\nMaterial or any derivatives thereof to the U.S. Government, such use,\nduplication, reproduction, release, modification, disclosure or transfer of this\ncommercial product and data, is restricted in accordance with 48 C.F.R. \u00a7\n12.211, 48 C.F.R. \u00a7 12.212, 48 C.F.R. \u00a7 227.7102-2, and 48 C.F.R. \u00a7 227.7202, as\napplicable.  Consistent with 48 C.F.R. \u00a7 12.211, 48 C.F.R. \u00a7 12.212, 48 C.F.R. \u00a7\n227.7102-1 through 48 C.F.R. \u00a7 227.7102-3, and 48 C.F.R. \u00a7\u00a7 227.7202-1 through\n227.7202-4, as applicable, the Splunk Materials are licensed to U.S. Government\nend users (i) only as Commercial Items and (ii) with only those rights as are\ngranted to all other users pursuant to this Agreement and any related\nagreement(s), as applicable.  Accordingly, You will have no rights in the Splunk\nMaterials except as expressly agreed to in writing by You and Splunk.\n\n19.  PUBLICITY.  You agree that Splunk may publish a brief description\nhighlighting your deployment of the Software, identify you as a Splunk customer\non any of Splunk's websites, client lists, press releases, and\/or other\nmarketing materials.\n\n20.  THIRD PARTY CONTENT DISCLAIMER. Most of the Extensions and content on\napps.splunk.com are submitted by third parties (\"Third-Party Content\"). Such\nThird-Party Content is the sole responsibility of the originator of that\nThird-Party Content. Splunk is not responsible for any Third-Party Content,\nwhether or not Splunk reviewed or moderated such Third Party Content. You agree\nthat you bear all risks associated with using or relying on the Third Party\nContent.  Splunk does not in any way warrant the accuracy, reliability,\ncompleteness, usefulness, non-infringement, or quality of any Third-Party\nContent, regardless of who originated that content (including our employees,\npartners, Affiliates or moderators), and even if an application is designated as\n\"certified\". Splunk hereby disclaim all warranties, including, but not limited\nto, any implied warranties of merchantability, quiet enjoyment, integration or\nfitness for a particular purpose, relating to Third Party Content.  Splunk shall\nnot be liable or responsible in any way for any loss or damage of any kind,\nincluding, but not limited to, lost profits, loss of use, data, business\ninterruption, costs of procuring substitute software or other indirect or\nconsequential damages, relating to your use of or reliance upon any Third Party\nContent.\n\n21.  CHOICE OF LAW AND DISPUTES.  The following Choice of Law and Disputes\nterms and conditions shall apply under this Agreement: (i) For other than the\nU.S. Government as a party, this Agreement shall be governed by and construed in\naccordance with the laws of the State of California, as if performed wholly\nwithin the state and without giving effect to the principles of conflict of law\nrules of any jurisdiction or the United Nations Convention on Contracts for the\nInternational Sale of Goods, the application of which is expressly excluded. Any\nlegal action or proceeding arising under this Agreement will be brought\nexclusively in the federal or state courts located in San Francisco, California\nand the parties hereby consent to personal jurisdiction and venue therein.  If a\ndispute arises between You and Splunk, and either You or Splunk files suit in\nany court of competent jurisdiction to enforce rights under this Agreement, then\nthe prevailing party shall be entitled to recover from the other party all costs\nof such action or suit, including, but not limited to, investigative costs,\ncourt costs and reasonable attorneys' fees (including expenses incurred to\ncollect those expenses). (ii) If a dispute arises between You and Splunk that is\nrelated to a Government customer that is subject to the Contract Disputes Act,\n41 U.S.C. \u00a7 7101 et seq., concerning issues of fact or law which relate to this\nAgreement (a \"CDA Dispute\"), the following dispute procedures shall apply.  If\nthe U.S. Government issues a final decision regarding a CDA Dispute, such\ndecision shall be provided within ten (10) days of receipt by You by written\nnotification to Splunk and subsequently binding upon Splunk to the same extent\nit is binding upon You, subject to Splunk's right to seek additional time, cost\nor both.  Splunk shall continue performance in accordance with the decision\npending any appeal that may be initiated pursuant to the provisions below.  If\nYou elect to appeal such decision under Your prime contract \"Disputes\" clause,\nSplunk shall be permitted to participate fully in such appeal concerning issues\nof fact or law which relate to this Agreement for the purpose of protecting\nSplunk's interest.  You shall not enter into a settlement with the Government as\nto any portion of the appeal affecting Splunk without Splunk's prior written\nconsent. If You elect not to appeal a CDA Dispute, such election must be made\nwithin thirty (30) days of the Government's final decision and Company agrees to\nnotify Splunk within three (3) days after Company elects not to appeal.  If\nSplunk elects to pursue appeal of such decision by the Contracting Officer,\nSplunk shall provide written notice of such election to You, and the parties\nshall enter into a sponsorship agreement pursuant to which Splunk shall have the\nright to prosecute in Your name, any and all appeals arising from the\nGovernment's determination.  Any such appeal brought by Splunk in Your name\nshall be at the expense of Splunk, provided, however, that You, at Your expense,\nshall provide Splunk with reasonable assistance in the presentation of such\nappeal.  (iii) If You are the U.S. Government as a party to this Agreement, this\nAgreement shall be governed by and interpreted in accordance with the Contract\nDisputes Act of 1978, as amended (41 U.S.C. \u00a7\u00a7 7101-7109).  Failure of the\nparties to reach agreement on any request for equitable adjustment, claim,\nappeal, or action arising under or relating to this Agreement shall be a dispute\nto be resolved in accordance with the clause at 48 C.F.R \u00a7 52.233-1, which is\nincorporated in this Agreement by reference.\n\n22.  GENERAL. All notices required or permitted under this Agreement or any\nExhibit hereto will be in writing and delivered in person, by confirmed\nfacsimile transmission, by overnight delivery service, or by registered or\ncertified mail, postage prepaid with return receipt requested, and in each\ninstance will be deemed given upon receipt.  All communications will be sent to\nthe addresses set forth in the applicable Order Document(s) or to such other\naddress as may be specified by either party to the other party in accordance\nwith this Section. You may not assign, delegate or transfer this Agreement, in\nwhole or in part, by agreement, operation of law or otherwise.  Splunk may\nassign this Agreement in whole or in part to (i) an Affiliate, upon written\nnotice to you (such notice to be delivered electronically or otherwise) or (ii)\nin connection with an internal reorganization or in connection with a merger,\nacquisition, or sale of all or substantially all of Splunk's assets. Any attempt\nto assign this Agreement other than as permitted herein will be null and void;\nprovided, however, Splunk may assign its rights to receive payment due as a\nresult of performance of this Agreement to a bank, trust company, or other\nfinancing institution, including any Federal lending agency in accordance with\nthe Assignment of Claims Act (31 U.S.C. \u00a7 3727) and may assign this Agreement in\naccordance with the provisions at 48 C.F.R \u00a7 42.12, as applicable. Subject to\nthe foregoing, this Agreement will bind and inure to the benefit of the parties'\npermitted successors and assigns.  This Agreement along with any additional\nterms incorporated herein by reference, including any Order Documents and any\nExhibits hereto, constitute the complete and exclusive understanding and\nagreement between the parties and supersede any and all prior or contemporaneous\nagreements, communications and understandings, written or oral, relating to\ntheir subject matter. Any waiver, modification or amendment of any provision of\nthis Agreement will be effective only if in writing and signed by duly\nauthorized representatives of both parties.  Any terms and conditions contained\nor referenced by either party in a quote, purchase order, acceptance, invoice or\nany similar document purporting to modify the terms and conditions contained in\nthis Agreement shall be disregarded and have no effect unless otherwise\nexpressly agreed to by the parties in accordance with the preceding sentence.\n\n\nEXHIBIT A\nDEFINITIONS\n\n1.  \"Affiliate\" means, with respect to any person or entity, any other person\nor entity that directly or indirectly Controls or is Controlled by such person\nor entity, from time to time, but only for so long as such Control exists.\n\"Control\" and its grammatical variants mean (i) a general partnership interest\nin a partnership, or (ii) the beneficial ownership of a majority of the\noutstanding equity entitled to vote for directors.\n\n2.  \"Data Duplication\" means an indexer that receives already indexed data\nfrom another indexer or group of indexers that first processed the same data\nunder a valid Software license.\n\n3.  \"Cluster\" means a group of Nodes administered by one Hadoop JobTracker or\nHadoop Resource Manager.\n\n4.  \"Enhancements\" means any updates, upgrades, releases, fixes, enhancements\nor modifications to the Software as provided under the terms and conditions\noutlined in Exhibit B.\n\n5.  \"Evaluation Software\" means Software licensed for internal evaluation\npurposes and not for productive business use.\n\n6.  \"Extensions\" mean any separate downloadable suite, add-on, example module,\ncommand, function, or application which extends the Software.\n\n7.  \"Fractional Use of Nodes\" means the greater of compute load or applicable\nstorage of the number of Nodes in Cluster(s) for a specific use case or business\nunit, as identified in an Order Document.\n\n8.  \"Free Splunk Software\" means Software licensed for free from Splunk.\n\n9.  \"Internal Business Purpose\" means the use of any of the Splunk Materials,\nas applicable, only for Your internal business use with Your systems, networks,\ndevices and data.  Such use does not include use of Your systems, networks or\ndevices as part of services You provide for a third party's benefit.\n\n10.  \"Node\" means a 64 bit Linux operating system or any other operating\nsystem identified in the documentation that runs Hadoop TaskTracker or Node\nManager to execute Splunk jobs.\n\n11.  \"Order Document(s)\" mean the purchase order or any equivalent ordering\ndocument and the order confirmation that detail the components, solutions, and\nquantities of your purchase of Splunk Materials.\n\n12.  \"Peak Daily Volume\" means the Purchased Peak Daily Volume, the Free Peak\nDaily Volume and\/or the Trial Peak Daily Volume, as applicable.\n\n13.  \"Purchased Software\" means Software purchased through Splunk or other\nchannels.\n\n14.  \"Software\" means the software components listed in the Order Document(s),\nFree Splunk Software, and Evaluation Software which have a valid license, and\nany applicable Enhancements thereof or thereto.\n\n15.  \"Splunk\" means Splunk Inc., a Delaware corporation, 250 Brannan Street,\nSan Francisco, California 94107.\n\n16.  \"Splunk API\" means the documentation and functionality included with the\nSoftware which enable the creation of Extensions.\n\n17.  \"Splunk Extensions\" mean any Extensions authored by Splunk and\ndownloadable through Splunk's online store.\n\n18.  \"Splunk Materials\" mean the Software, Splunk API, and\/or the Splunk\nExtensions.\n\n\nEXHIBIT B\nSPLUNK INC.\nSUPPORT AND MAINTENANCE TERMS AND CONDITIONS\n\nYou agree that the following terms and conditions (\"Terms and Conditions\") shall\ngovern the delivery of any support and\/or maintenance services by Splunk\n(\"Support\") listed on an Order Document entered into pursuant to the Splunk\nSoftware License Agreement (the \"Agreement\") to which these Terms and Conditions\nare attached and made a part thereof.  Subject to your termination rights set\nforth in the Agreement, ordering any Support from Splunk or any authorized\nreseller indicates your acceptance of these Terms and Conditions.  These Terms\nand Conditions are effective upon receipt and confirmation of acceptance of your\npurchase order by Splunk or an authorized reseller (the \"Effective Date\").\n\n1.  DEFINITIONS.   Unless otherwise defined in these Terms and Conditions,\ncapitalized terms shall have the meanings set forth in the Agreement.\n\n2.  SUPPORT AND MAINTENANCE.\n\n2.1.  Services.  Subject to your timely payment of the applicable annual\nSupport fees set forth in your Order Document(s) (the \"Support Fees\"), Splunk\nwill provide the level of Support identified in your Order Document(s) in\naccordance with the Support descriptions set forth below.  Splunk will notify\n(electronically or otherwise) you of any amendments to such Support descriptions\nin each notice of term renewal. No other maintenance or support for the Software\nis included in these Terms and Conditions.\n\n2.2.  Support Fees.  Support Fees will be due and payable in accordance with\nthe Order Document(s). Splunk will notify (electronically or otherwise) you of\nthe then-current annual Support Fee for your level of Support in each notice of\nterm renewal. Support Fees will be non-refundable once paid.\n\n2.3.  Exclusions.  Splunk will have no obligation of any kind to provide\nSupport for problems caused by or arising out of any of the following (each, a\n\"Licensee-Generated Error\"): (i) modifications to the Software not made by\nSplunk; (ii) use of the Software other than as authorized in the Agreement or as\nprovided in the documentation for the Software; (iii) damage to the media on\nwhich the Software is provided or to the machine on which the Software is\ninstalled; (iv) your negligence or fault; (v) versions of the Software other\nthan the most recent version or the Supported Prior Version (defined in Section\n2.5.9); (vi) third-party products not expressly supported by Splunk; or (vii)\nconflicts related to replacing or installing hardware, drivers, and software\nthat has not been Splunk certified.  If Splunk determines that it is necessary\nto provide support for a problem caused by a Licensee-Generated Error, Splunk\nwill notify you thereof as soon as Splunk is aware of such Licensee-Generated\nError and Splunk will have the right to invoice you at Splunk's then-current\ntime and materials rates for any such support provided by Splunk.\n\n2.4.  Restrictions.  Support is delivered in English only unless you are in a\nlocation where Splunk has made localized Support available.\n\n2.5.  Support Descriptions.\n\n2.5.1.  Splunk Enterprise Support. Splunk Enterprise Support provides\ntelephone support, online documentation, web forums, email and a web-based\nportal for submitting cases and tracking case status. Support cases are handled\nbased on case priority levels as described in Section 2.5.3.  When submitting a\ncase, customers select the priority for initial response by logging the case\nonline, in accordance with the priority guidelines set forth in Section 2.5.3.\nWhen the case is received, Splunk Customer Support may change the priority if\nthe issue does not conform to the criteria for the selected priority and will\nprovide you with notice (electronic or otherwise) of such change.  Splunk will\nrespond to Splunk Enterprise Support requests and will provide workarounds or\nfixes in accordance with the guidelines set forth in Section 2.5.4.\n\n2.5.2.  Splunk Global Support. Splunk Global Support provides the same\nservices as defined as Enterprise support and also provides a dedicated resource\nto contact for meetings as frequently as weekly to monitor your support issues;\nto provide additional status reports and metrics; and to coordinate and execute\na quarterly account status review at a mutually agreeable time.\n\n2.5.3.  Case Priority Levels. Case priorities are assigned based on the\ntechnical importance of the problem on your Splunk environment.\n\nP1 = Splunk Software is completely inaccessible or the majority of its\n     functionality is unusable.\nP2 = One or more key features of Splunk Software are unusable.\nP3 = Any other case where a Splunk Software feature is not operating as\n     documented.\nP4 = All enhancement requests.\n\n2.5.4.  Target Fix, Workaround, Escalation and Response Times.\n\nInitial Response &amp; Acknowledgment, by case priority\nTargeted Fix Date or Workaround, by case priority\n\nP1: 4 hours             P1: 1 day\nP2: Next business day   P2: 1 week\nP3: Two business days   P3: Next release\nP4: Two business days   P4: At Splunk's discretion\n\nEscalation, by case priority\nEmail Status Updates for Open Cases, by case priority\n\nP1: Manager: Immediate \/ VP: 1 business day                           P1: Daily\nP2: Manager: 1 business day \/ VP: 1 week                              P2: Weekly\nP3: VP Product Management reviews all open bugs quarterly             P3: None\nP4: VP Product Management reviews all enhancement requests quarterly  P4: None\n\n2.5.5.  Authorized Support Contacts. Support will be provided solely to the\nauthorized individual(s) specified by you that Splunk will communicate with when\nproviding Support (\"Support Contacts\"). Splunk strongly recommends that your\nSupport Contact(s) be trained on the Software. Your Order Document(s) will\nindicate a maximum number of authorized Support Contacts for your license level.\nYou will be asked to designate your authorized support contacts, including their\nprimary email address and Splunk.com login ID, following Splunk's acknowledgment\nof your Order Document(s).\n\n2.5.6.  Defect Resolution. Should Splunk in its sole judgment determine that\nthere is a defect in the Software, it will, at its sole option, repair that\ndefect in the version of the Software that you are currently using or instruct\nyou to install a newer version of the Software with that defect repaired. Splunk\nreserves the right to provide you with a workaround in lieu of fixing a defect\nshould it in its sole judgment determine that it is more effective to do so.\n\n2.5.7.  Support Hours. Support is provided via telephone, email and web\nportal. Support will be delivered by a member of Splunk's technical support team\nduring the regional hours of operation listed below.\n\nEnterprise Support  Global Support\n\nP1:  24 x 7  P1:  24 x 7\n\nP2:  Monday through Friday by region (North America, APAC and EMEA) during\nstandard business hours (8 am to 5 pm); excluding Splunk holidays  P2:  24\nhours per day during the five business days (Monday through Friday), excluding\nSplunk holidays\n\nP3:  Monday through Friday by region (North America, APAC and EMEA) during\nstandard business hours (8 am to 5 pm); excluding Splunk holidays  P3:  24\nhours per day during the five business days (Monday through Friday), excluding\nSplunk holidays\n\nP4:  Monday through Friday by region (North America, APAC and EMEA) during\nstandard business hours (8 am to 5 pm); excluding Splunk holidays  P4:  Monday\nthrough Friday by region (North America, APAC and EMEA) during standard business\nhours (8 am to 5 pm); excluding Splunk holidays\n\n2.5.8.  Your Obligation to Assist. Should you report a purported defect in the\nSoftware to Splunk, Splunk may require you to provide them with the following\ninformation: (a) a general description of the operating environment, (b) a list\nof all hardware components, operating systems and networks, (c) a reproducible\ntest case, and (d) any log files, trace and systems files. Your failure to\nprovide this information may prevent Splunk from identifying and fixing that\npurported defect.\n\n2.5.9.  Software Upgrades and Software End of Life Policy. When available,\nSplunk provides updates, upgrades, maintenance releases and reset keys only to\nSplunk Enterprise or Global Support customers. Splunk Software comes with a\nthree digit number version. The first digit represents the major release (i.e.\nupgrade), the second digit identifies the minor releases (i.e. updates) and the\nthird digit identifies the maintenance releases.  With a new major version, the\nnumber to the left of the decimal is changed and for minor releases, the number\nto the right of the decimal point is increased. If your Splunk Enterprise or\nGlobal Support agreement expires, you will receive only maintenance releases,\nwhen available.  Subject to the foregoing, Splunk provides full Support,\nincluding, when available, bug fixes, only on the current major release and (a)\nthe immediately prior major release or (b) twenty-four months from the then\ncurrent major release, whichever period is greater  (\"Supported Prior\nVersions\").\n\n2.6.  Changes in Support and Software.  Subject to Section 2.5.9, You\nacknowledge that Splunk has the right to discontinue the manufacture and\ndevelopment of any Software and the Support for any Software, including, without\nlimitation, the distribution of older Software versions, at any time in its sole\ndiscretion, provided that Splunk agrees not to discontinue Support for the\nSoftware during the current annual term of these Terms and Conditions, subject\nto the termination provisions herein.  Splunk reserves the right to alter\nSupport from time to time, using reasonable discretion but in no event shall\nsuch alterations result in (i) diminished support from the level of Support set\nforth herein; (ii) materially diminished obligations for Splunk; (iii)\nmaterially diminished your rights; or (iv) higher Support Fees during the\nthen-current term.  Splunk shall provide you with thirty (30) days prior written\nnotice (delivered electronically or otherwise) of any permitted material changes\nto the Support contemplated herein.\n\n3.  TERM AND TERMINATION.\n\n3.1.  Term.  These Terms and Conditions will commence on the date when Splunk\ndelivers the license key for the Software to you and, unless terminated earlier\nin accordance with the terms of the Agreement, for a period of one (1) year\nthereafter (the \"Initial Term\"). The agreement will automatically renew for\nadditional one (1)-year terms (each, a \"Renewal Term,\" and the Initial Term,\ncollectively with any and all Renewal Terms, shall be referred to as the\n\"Support Term\"), unless either party provides the other (or if purchased through\na reseller, you provide reseller) with written notice of its intent not to renew\nthe agreement at least thirty (30) days prior to the end of the then current\nInitial Term or Renewal Term.   If you allow your Support Term to expire, then\nyou may seek to re-activate Support by submitting a purchase order that includes\nfees for the lapsed period.\n\n3.2.  Survival.  The rights and obligations of the parties contained in\nSections 1 and 3.2 will survive the expiration or termination of the Agreement,\nthese Terms and Conditions or any Order Document(s).\n\n4.  FORCE MAJEURE.  Splunk will not be responsible for any failure or delay in\nits performance under these Terms and Conditions due to causes beyond its\nreasonable control, including, but not limited to, labor disputes, strikes,\nlockouts, shortages of or inability to obtain labor, energy, raw materials or\nsupplies, war, acts of terror, riot, acts of God or governmental action.\n\nSplunk rev.  9.11.2013\nDo you agree with this license? [y\/n]: y\n\nThis appears to be your first time running this version of Splunk.\nCopying '\/opt\/splunk\/etc\/openldap\/ldap.conf.default' to '\/opt\/splunk\/etc\/openldap\/ldap.conf'.\nGenerating RSA private key, 1024 bit long modulus\n.....................++++++\n................................................................++++++\ne is 65537 (0x10001)\nwriting RSA key\n\nGenerating RSA private key, 1024 bit long modulus\n.++++++\n.............................++++++\ne is 65537 (0x10001)\nwriting RSA key\n\nMoving '\/opt\/splunk\/share\/splunk\/search_mrsparkle\/modules.new' to '\/opt\/splunk\/share\/splunk\/search_mrsparkle\/modules'.\n\nSplunk&gt; The Notorious B.I.G. D.A.T.A.\n\nChecking prerequisites...\n        Checking http port [8000]: open\n        Checking mgmt port [8089]: open\n        Checking configuration...  Done.\n                Creating: \/opt\/splunk\/var\/lib\/splunk\n                Creating: \/opt\/splunk\/var\/run\/splunk\n                Creating: \/opt\/splunk\/var\/run\/splunk\/appserver\/i18n\n                Creating: \/opt\/splunk\/var\/run\/splunk\/appserver\/modules\/static\/css\n                Creating: \/opt\/splunk\/var\/run\/splunk\/upload\n                Creating: \/opt\/splunk\/var\/spool\/splunk\n                Creating: \/opt\/splunk\/var\/spool\/dirmoncache\n                Creating: \/opt\/splunk\/var\/lib\/splunk\/authDb\n                Creating: \/opt\/splunk\/var\/lib\/splunk\/hashDb\n        Checking critical directories...        Done\n        Checking indexes...\n                Validated: _audit _blocksignature _internal _introspection _thefishbucket history main summary\n        Done\nNew certs have been generated in '\/opt\/splunk\/etc\/auth'.\n        Checking filesystem compatibility...  Done\n        Checking conf files for problems...\n        Done\nAll preliminary checks passed.\n\nStarting splunk server daemon (splunkd)...\nDone\n\n\nStarting splunkweb...  Generating certs for splunkweb server\nGenerating a 1024 bit RSA private key\n.................++++++\n.............................++++++\nwriting new private key to 'privKeySecure.pem'\n-----\nSignature ok\nsubject=\/CN=&lt;mon_serveur&gt;\/O=SplunkUser\nGetting CA Private Key\nwriting RSA key\nDone\n\n\nIf you get stuck, we're here to help.\nLook for answers here: http:\/\/docs.splunk.com\n\nThe Splunk web interface is at http:\/\/&lt;mon_serveur&gt;:8000\n<\/pre>\n\n\n\n<h2 class=\"wp-block-heading\">Acc\u00e9der \u00e0 Splunk<\/h2>\n\n\n\n<p>Ajouter les r\u00e8gles de filtrage n\u00e9cessaires, telles que&nbsp;:<\/p>\n\n\n\n<pre class=\"wp-block-preformatted\"># iptables -A INPUT -i eth0 -s &lt;votre_ipv4_client&gt; -p tcp -m tcp --dport 8000 -m comment \"mon acc\u00e8s personnel \u00e0 splunk\" -j ACCEPT\n# ip6tables -A INPUT -i eth0 -s &lt;votre_ipv6_client&gt; -p tcp -m tcp --dport 8000 -m comment \"mon acc\u00e8s personnel \u00e0 splunk\" -j ACCEPT \n<\/pre>\n\n\n\n<p>Se rendre sur la page d&#8217;administration de Splunk&nbsp;: http:\/\/&lt;mon_serveur&gt;:8000<\/p>\n\n\n\n<p>S&#8217;authentifier sur l&#8217;interface d&#8217;administration&nbsp;: dans le cadre d&#8217;une premi\u00e8re connexion, il s&#8217;agit du nom d&#8217;utilisateur&nbsp;<em>admin<\/em>&nbsp;avec le mot de passe&nbsp;<em>changeme<\/em>. Penser \u00e0 modifier le mot de passe du compte&nbsp;<em>admin<\/em>.<\/p>\n\n\n\n<p>Une fois sur la page d&#8217;administration de Splunk, ajouter des donn\u00e9es afin de commencer \u00e0 utiliser Splunk.<\/p>\n\n\n\n<p>L&#8217;utilisation de Splunk fera l&#8217;objet d&#8217;un prochain billet \ud83d\ude09<\/p>\n","protected":false},"excerpt":{"rendered":"<p>R\u00e9cup\u00e9ration du paquet Splunk Se rendre sur le portail&nbsp;Splunk&nbsp;afin de&nbsp;cr\u00e9er un compte.Une fois le compte cr\u00e9er, s&#8217;authentifier puis se rendre sur la page des&nbsp;t\u00e9l\u00e9chargements.T\u00e9l\u00e9charger le paquet correspondant \u00e0 votre syst\u00e8me &#8230;<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[3],"tags":[8,9,15],"class_list":["post-28","post","type-post","status-publish","format-standard","hentry","category-computing","tag-debian","tag-linux","tag-splunk"],"_links":{"self":[{"href":"https:\/\/www.n3oxid.fr\/index.php?rest_route=\/wp\/v2\/posts\/28","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.n3oxid.fr\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.n3oxid.fr\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.n3oxid.fr\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.n3oxid.fr\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=28"}],"version-history":[{"count":1,"href":"https:\/\/www.n3oxid.fr\/index.php?rest_route=\/wp\/v2\/posts\/28\/revisions"}],"predecessor-version":[{"id":29,"href":"https:\/\/www.n3oxid.fr\/index.php?rest_route=\/wp\/v2\/posts\/28\/revisions\/29"}],"wp:attachment":[{"href":"https:\/\/www.n3oxid.fr\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=28"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.n3oxid.fr\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=28"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.n3oxid.fr\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=28"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}