Setup Splunk on Kali

This blog is for anyone who love hacking and don’t know how to setup SIEM Homelab (Splunk).

Download Splunk

wget -O splunk_soar-unpriv-6.2.1.305-7c40b403-el7-x86_64.tgz "https://download.splunk.com/products/splunk_soar-unpriv/releases/6.2.1/linux/splunk_soar-unpriv-6.2.1.305-7c40b403-el7-x86_64.tgz"

Setup Environment

After downloading, we need to extract it. Change to root mode to run Splunk.

sudo tar -xzvf ./splunk_soar-unpriv-6.2.1.305-7c40b403-el7-x86_64.tgz -C /opt

sudo -i

cd /opt/splunk/bin

./splunk start

press Space to read all license and type y to continue.

set username and password (at least 8 characters)

wait a few minutes, it will gives you a link, open it.

Source: How to setup Splunk

Happy hacking!