Any software with a device driver that intermediates between Splunk Enterprise and the operating system can restrict processing power available to Splunk Enterprise, causing slowness and even an unresponsive system. The Splunk Enterprise indexing subsystem requires high disk throughput.

The user you choose has ramifications on what you must do prior to installing the software, and more details can be found there.ĭisable or limit antivirus software if able If you plan to upgrade Splunk Enterprise, see How to upgrade Splunk Enterprise for instructions and migration considerations before proceeding.īefore you install Choose the Windows user Splunk should run asīefore installing, see Choose the Windows user Splunk should run as to determine which user account Splunk should run as to address your specific needs. The universal forwarder is a separate executable from Splunk Enterprise and uses a different installer. Note: If, rather than installing Splunk Enterprise, you want to install the Splunk universal forwarder, see Install a Windows universal forwarder in the Universal Forwarder manual. If you attempt to run the installer in such a way, it warns you and prevents the installation. For example, you cannot install Splunk Enterprise on a machine that runs Windows Server 2003. You also cannot install Splunk Enterprise on a machine that runs an unsupported OS.

You cannot install or run the 32-bit version of Splunk Enterprise for Windows on a 64-bit Windows machine.

See Install on Windows from the command line for the command line installation procedure. More options, such as silent installation, are available if you install from the command line. You can install Splunk Enterprise on Windows with the Graphical User Interface (GUI)-based installer or from the command line.

For windows instal DNSLookupView 1.12