>> We're in Module 3 where we will be setting up Splunk.
In this module, we'll
discuss the different parts of Splunk,
go through the steps to set up
a quick practice environment and show
you how to install forwarders to get
data into your Splunk environment.
Before we move on to
the next video discussing the parts of Splunk,
I want to give a few notes
about planning your environment.
We will not cover everything needed to
adequately plan for
a production environment in this course,
but I wanted to give you some
resources for further study.
You don't need any specific setup for this course,
but if you're using an unusual system,
you may want to check out
Splunk system requirements prior to
trying to run through the installation instructions.
If you're working with an old system,
for example, you may need
to use an older version of Splunk.
When you're looking to set up
Splunk for a real production environment,
you'll likely want to check out
Splunk's capacity planning manual,
this specifies what hardware
requirements you may be looking at.
There are also some tools
like Splunk sizing.appspot.com that
can help you in planning storage requirements
based on how much data you're ingesting,
your data retention policies, and architecture.
Even for a small company,
these requirements can quickly get up to terabytes.
Splunk's installation manual can show you supported OSs,
and provide more information on system requirements,
here are a few charts from that documentation.
For this course, and for
the study as a beginner at Splunk,
you may want to start off with
some disposable virtual machines to work from.
Microsoft has a pre-built Windows 10 Enterprise VM,
you could practice with as one option.
Well you aren't likely to see a business
running Splunk off a Kali Linux machine,
Offensive Security offers a pre-built machine you
could use to jump into
the activities for this course quickly.
You may want to use both this one,
and the Windows machine to
get a feel for working in multiple environments.
Even if you know you want to set
up the Splunk platform on Linux,
it's likely you'll need to install
forwarders in the feature on Windows machines.
Since we aren't going
in-depth with setting up virtual machines,
if you do run into repeated issues,
you can still complete most of
the activities in this course by signing
up for a free seven-day trial for the Splunk sandbox.
This will give you pre-populated data to play with,
and you can still work on
using the web console, and running searches.
This isn't the preferred option, but if you know,
you only want to get a feel for
the console, you could do this.
We'll dive into the different parts of Splunk
in the next video. Thanks for watching.