Once we are completed downloading our Splunk packages, let's understand how the Splunk directory structure
is placed and go through some of the most important directories by default.
The Splunk home, which is referred as OPPT, Splunk or C program files, Splunk and Windows and opt
Splunk by default on Linux.
It is totally customizable.
And throughout this tutorial, whenever we mention Splunk home, it will be either Opt Splunk or C program
files Splunk based on the OS we are using in the context.
So let's open up a installation or Splunk installation package.
This is how a typical installation package looks like.
As you can see from the top, we are using the RPM package from our downloads to go through the directory
structure.
This will be just inside our Splunk comm.
That is to Splunk.
Inside of Splunk, we can see there is a bin directory.
Which is where all the executables of Splunk are placed.
If you see there are a lot of executables which are Python and there are scripts which will be running.
Based on the invocation from the Splunk process and.
Once we go inside bin there is a custom folders called Scripts which is used for placing users created
scripts.
We will see how we can utilize this and the feature discussions.
Let me go back to.
Ah, ah, ah.
Blanco.
The next important directory of Splunk is the ADC directory, where the complete configuration files
of Splunk instruments resides under Etsy.
There are many important directories, like apps where all the applications of Splunk are installed.
Deployment apps, which is used by a deployment server to hold all its clients application and push
this application into the client's master app.
It's.
The Indexer cluster or the Cluster Master where each holds or the cluster related applications, slave
apps which are used by the members of the cluster or the indexers for holding the configuration.
Disabled apps.
These are.
Used by.
The apps which are disabled on this circuit, which will be moved into disabled apps.
And there is finally system.
Which holds all the configurations which are defined or predefined in a Splunk installation.
Once you are actively using Splunk, you'll become much more familiar with the directory structure of
Splunk and get used to it.
And here.
We are missing one more important directory in the Splunk home.
That is our VMware directory since it will be created on the first starting of your.
Splunk installation.
There are two important location inside WAAS.
Let me write it down.
The two important location inside.
What?
So it will be Splunk home.
Followed by.
But Log Splunk.
And the second one will be where?
Splunk.
So these two are some of the most important directories under Splunk, which B which will be created
upon starting off Splunk.
The log Splunk is where all the logs of Splunk applications are stored, and that Lib Splunk is the
default DB location of Splunk where all the password data is stored along with the metadata information.
That should cover most commonly used directories, which are very important as part of our day to day
activity of Splunk, admin or Splunk object.
The configuration files or Splunk are having different hierarchy and they always end with dot conf.
In our next discussion, we'll be discussing.
About how this configurations file works and what is the hierarchy of configuration when a Splunk starts
up?