One more process to consider disabling is RSA Linux, which is also known as Secure Linux.
If we do not want to disable Linux completely, we need to allow a C Linux to run Splunk by using other
methods where you can whitelist Splunk process to be allowed or as an exception.
From running outside clinics.
For this example and simplicity of this course, we can see how to disable a c Linux there c linux configurations
are set under this folder or file.
Let us see.
I'll check for the contents of the file using the Linux Command cat, followed by the location of the
file from this file.
We noticed that it is presently enabled and you say enforcing in Linux.
It is clear that Linux is unable to disable use any of the text editor available in Linux.
To open up the file.
And change the value.
Targeted.
Or you can comment about the targeted value and seen the enforcing to disable.
I will change the clinic's status to disable.
Once you are changed or disabled, it's always requires a reboot to.
Make the changes affected.
Now we are disabled as clinics.
Let our instance come up.
In the meantime, we'll move on to our next prerequisites.
The next one is the Ihop's test.
On a indexers mission to test the provisioned IOPS is greater than 200 IOPS, which was as recommended
in our previous tutorial.
We can test IOPS using a third party utility known as Bonnie Plus Plus, which is.
User to test IOPS.
You need to install C++ by default in RedHat Linux, which we'll be using throughout our.
Tutorial.
But C++ is not installed.
We need to download this package, install and then test for the IOPS.
For testing bond C++.
I have already installed one e plus plus on our.
Cloud instance.
Let us see how we can measure Aiops using C++.
This will be your complete command to test your bone C++ where if an D represents the mount point,
which you'll be installing Splunk, we'll be installing Splunk on slash, oped and iPhone, as mentioned
by you, are two times the RAM for this instance.
As of now we have only one GB of RAM.
Since it is our demo instance, we will multiply it by two and mention the ram.
I want you is the user which will be running this read or write operations on this mount point throughout
the course will be creating Splunk as a application account for our Splunk application to run, and
it is highly recommended to Splunk to run as a non privileged account such as Root.
All you have to do is hit enter.
It will start simulating arrival as of now I lot I'll not hit enter because we are going to kill our
demo instance since it has just one GB and probably 300 IOPS.
Now considering we have it enter open up another terminal.
Once you're logged in.
Now we are in.
Use I use that to check every one second to know what is the IAP currently in use.
Since we are not running any operations you can see the transaction per second is as of now is very
less or we can consider it as very low.
If you see C++, considering that we have hit enter here and it starts, you know, simulating the read
and write operations on our op t mount point, you can probably leave it for 10 to 15 minutes.
You'll probably see here 200 1300 noting that that we have achieved our IOPS requirement for Splunk
indexers.
Once we have verified the IOPS meets the required conditions of greater than 200 IOPS, we can proceed
further to.
Next prerequisites of setting limit that you limit as a number of values to set as per Splunk recommendations.
The link that we are using takes straight to the documentation of Splunk.
Just search for EU limit options and set all this options as per a Splunk recommendation so that on
all the Splunk instances, make sure these limits are set for Splunk to run at your optimum performance.
Considering we have set our EU limits.
Let me check if you limit packages are in store on our cloud machine.
This is our present EU limit size.
As you can see, it can start setting all these parameters as per recommendation.
Let us see.
First open files.
You limit if an RN which is set to 1024 by default.
It needs to be as per recommendation set to 8192.
This is as simple as that.
Just mention the command.
You'll see the value and take the recommended value from the Splunk portal and mention it next to the
command so that it is set into.
The you limit once you set all these parameters.
Which should be done to install our first Splunk instance.
Finally have your licenses ready so that once we complete our installation, we can configure the license.