Since we have seen in from our previous tutorials how to download Splunk packages and what all packages
for Splunk are available.
Let's see how Splunk actually looks and feels.
I have already my Splunk instance set up with Amazon, but we will be covering the installation of Splunk
and the later part of tutorial.
Let's.
Log into our Splunk.
But these are all the concepts in Shell over your Splunk.
It will be covering through.
Let's go to Amazon.
So this is our IP of the instance.
I've already logged in by default.
Splunk, the UI or the Splunk web process runs on Port eight thousandths.
Let me log in.
Once we are logged in.
This is a simple Splunk instance which is running on Amazon with some basic infrastructure just for
demo during this tutorial.
So once you log in, you'll be seeing this page, which is also known as the launcher screen or the
welcome screen, which is the default welcome page for all users.
This can be customized to a great extent for the simplicity of tutorial.
We will leave this as it is for now.
But first, let's start with the Splunk.
Icon, which will be like your home button on your mobile phones no matter where you are in Splunk.
If you click on the Splunk icon, you'll be brought to your home page.
The next link right next to the home button is the app's main.
Which shows the list of apps that are installed on Splunk.
As of now, we are just search and reporting app, which is the basic app that comes as part of all
Splunk instances.
The next link in the top menu is the user menu where it displays as administrator.
Since I've logged in with admin credentials, if you are logged in as a normal user or another user,
it will display your name, whichever mentioned as part of the user profile.
This as many links which is related to user profile, where you can change your password, set your
time zone, and most of them are explanatory.
This is your password resetting zone you can call it as and you can set your timezone, whichever the
location you are.
The default application which you would like to see by default, it is the launcher.
The second one is your search.
These are some in-built apps which will be going through at the later stage.
So just remember the default is the launcher.
The search is the search and reporting app.
And these are some just to restart your background jobs in case if Splunk restarts so that your background
jobs also will reinstate.
And these are some default modes.
Whichever you need, you'll be able to customize and the theme for highlighting the syntax while writing
the search queries.
These are some basic self explanatory account settings which you'll be able to do as part of this tutorial.
You'll be getting free access for 30 days.
You can go around all these things once you get free access to a demo instance, which will be part
of the complete package of this Splunk tutorial.
Moving on to our next link on the top menu is the messages in this.
You can see all Splunk related errors.
Warnings, license violation of license messages, which you should make sure being a Splunk admin or
architect to keep the messages tab clear almost all the time.
The next step is the Settings tab, which is the most important and crucial and includes all the configuration
related to Splunk or under this menu, which we will be going through this complete module of settings
in a separate section for keeping this initial overview session short.
Let's move on to next step.
The next is the activity tab.
Here you will be able to see and analyze Splunk performance, where you can see how many searches are
running, who are running, how long the searches have been running, and what are the status of the
searches on this Splunk instance?
As soon as you click on the jobs link, you can see I've run a couple of searches quite this back and
it has completed and if you see all the searches that has been done, there has been only one search
that has been run.
This was just for testing whether my instance was up or down and whether it was indexing some data it
was doing.
It was up and running.
So this information is used for troubleshooting your Splunk performance.