[{"data":1,"prerenderedAt":417},["ShallowReactive",2],{"blog-\u002Fblog\u002Finstallation-splunk-sur-debian":3,"blog-\u002Fblog\u002Finstallation-splunk-sur-debian-surround":364,"blog-\u002Fblog\u002Finstallation-splunk-sur-debian-certifications":416},{"id":4,"title":5,"body":6,"categories":352,"cover":353,"cover_contain":354,"credly_badge_id":352,"date":355,"description":356,"extension":357,"meta":358,"navigation":354,"path":359,"related_certifications":352,"seo":360,"slug":361,"stem":362,"__hash__":363},"blog\u002Fblog\u002Finstallation-splunk-sur-debian.md","Installation de Splunk sur Debian 7",{"type":7,"value":8,"toc":344},"minimark",[9,14,18,93,100,113,117,135,242,246,252,268,271,279,285,289,292,305,308,314,317,322,325,330,333,337,340],[10,11,13],"h2",{"id":12},"cas-dusage-concret","Cas d'usage concret",[15,16,17],"p",{},"Vous devez superviser et corréler les logs de vos infrastructures hétérogènes : voici comment installer Splunk sur Debian 7.",[15,19,20,24,25,28,29,32,33,36,37,40,41,44,45,48,49,52,53,56,57,60,61,64,65,67,68,71,72,75,76,78,79,86,87,89],{},[21,22,23],"strong",{},"Splunk"," est une solution qui répond au besoin des ",[21,26,27],{},"infrastructures"," type « ",[21,30,31],{},"IaaS"," » , « ",[21,34,35],{},"PaaS","« , et « ",[21,38,39],{},"SaaS","« .",[42,43],"br",{},"\nLe ",[21,46,47],{},"Cloud Computing"," et le ",[21,50,51],{},"Big Data"," génèrent une ",[21,54,55],{},"énorme quantité"," d’",[21,58,59],{},"informations"," et de simples serveurs de ",[21,62,63],{},"journaux d’événements"," (log) ne sont pas adaptés pour centraliser et analyser ce flux.",[42,66],{},"\nCe sont des ",[21,69,70],{},"données machines"," qui seront ",[21,73,74],{},"analysées"," et mises en relation entre elles**.**",[42,77],{},"\nCet article se base sur la ",[80,81,85],"a",{"href":82,"rel":83},"http:\u002F\u002Fdocs.splunk.com\u002FDocumentation\u002FSplunk\u002F6.0.1\u002FInstallation\u002FInstallonLinux",[84],"nofollow","documentation officielle de Splunk"," avec la version gratuite de Splunk.",[42,88],{},[90,91,92],"em",{},"La version Splunk est la 6.0.1, modèle gratuit qui permet d’indexer au maximum 500Mo de logs par jour.",[15,94,95,96,99],{},"Les ",[21,97,98],{},"données machines Splunk"," :",[15,101,102,103,106,107,112],{},"Un article intéressant sur le « ",[21,104,105],{},"journaldunet"," » : ",[80,108,111],{"href":109,"rel":110},"http:\u002F\u002Fwww.journaldunet.com\u002Fsolutions\u002Fanalytics\u002Fsplunk-le-big-data-de-l-internet-des-objets.shtml",[84],"SplunkSplunk nouvelle pépite montante du Big Data",".",[10,114,116],{"id":115},"inscription-et-téléchargement-de-splunk","Inscription et téléchargement de Splunk",[15,118,119,120,112,125,127,128,130,131,134],{},"Pour télécharger Splunk gratuitement, il vous faudra créer un compte à ",[80,121,124],{"href":122,"rel":123},"https:\u002F\u002Fwww.splunk.com\u002Fpage\u002Fsign_up\u002Fsplunkd",[84],"cette adresse",[42,126],{},"\nUne fois les étapes de validation de votre compte passées, alors il faut télécharger le paquet.",[42,129],{},"\nDans mon cas, une distribution Debian 7 le paquet sera le « ",[21,132,133],{},".deb","«",[136,137,142],"pre",{"className":138,"code":139,"language":140,"meta":141,"style":141},"language-bash shiki shiki-themes material-theme-lighter material-theme material-theme-palenight","wget http:\u002F\u002Fwww.splunk.com\u002Fpage\u002Fdownload_track?file=6.0.1\u002Fsplunk\u002Flinux\u002Fsplunk-6.0.1-189883-linux-2.6-amd64.deb&platform=Linux&architecture=x86_64&version=6.0.1&product=splunkd&typed=release&name=linux_installer&d=pro&elq=420033cd-be42-42c2-9137-efe395e1a8ea\n","bash","",[143,144,145],"code",{"__ignoreMap":141},[146,147,150,154,158,162,166,169,172,174,177,179,182,184,187,189,192,194,197,199,202,204,207,209,212,214,217,219,222,224,227,229,232,234,237,239],"span",{"class":148,"line":149},"line",1,[146,151,153],{"class":152},"sBMFI","wget",[146,155,157],{"class":156},"sfazB"," http:\u002F\u002Fwww.splunk.com\u002Fpage\u002Fdownload_track?file=6.0.1\u002Fsplunk\u002Flinux\u002Fsplunk-6.0.1-189883-linux-2.6-amd64.deb",[146,159,161],{"class":160},"sMK4o","&",[146,163,165],{"class":164},"sTEyZ","platform",[146,167,168],{"class":160},"=",[146,170,171],{"class":156},"Linux",[146,173,161],{"class":160},[146,175,176],{"class":164},"architecture",[146,178,168],{"class":160},[146,180,181],{"class":156},"x86_64",[146,183,161],{"class":160},[146,185,186],{"class":164},"version",[146,188,168],{"class":160},[146,190,191],{"class":156},"6.0.1",[146,193,161],{"class":160},[146,195,196],{"class":164},"product",[146,198,168],{"class":160},[146,200,201],{"class":156},"splunkd",[146,203,161],{"class":160},[146,205,206],{"class":164},"typed",[146,208,168],{"class":160},[146,210,211],{"class":156},"release",[146,213,161],{"class":160},[146,215,216],{"class":164},"name",[146,218,168],{"class":160},[146,220,221],{"class":156},"linux_installer",[146,223,161],{"class":160},[146,225,226],{"class":164},"d",[146,228,168],{"class":160},[146,230,231],{"class":156},"pro",[146,233,161],{"class":160},[146,235,236],{"class":164},"elq",[146,238,168],{"class":160},[146,240,241],{"class":156},"420033cd-be42-42c2-9137-efe395e1a8ea\n",[10,243,245],{"id":244},"installation-de-splunk-sous-debian-7","Installation de Splunk sous Debian 7",[15,247,248,249,251],{},"L’installation de Splunk est extrêmement simple et ne requiert aucune manipulation préalable.",[42,250],{},"\nInstallez le paquet en « .deb » avec le « dpkg » de Debian :",[136,253,255],{"className":138,"code":254,"language":140,"meta":141,"style":141},"dpkg -i splunk-6.0.1-189883-linux-2.6-amd64.deb\n",[143,256,257],{"__ignoreMap":141},[146,258,259,262,265],{"class":148,"line":149},[146,260,261],{"class":152},"dpkg",[146,263,264],{"class":156}," -i",[146,266,267],{"class":156}," splunk-6.0.1-189883-linux-2.6-amd64.deb\n",[15,269,270],{},"L’installation se déroulera de cette façon :",[136,272,277],{"className":273,"code":275,"language":276},[274],"language-text","Splunk rev.  9.11.2013\nDo you agree with this license? [y\u002Fn]: y          \n\nThis appears to be your first time running this version of Splunk.\nCopying '\u002Fopt\u002Fsplunk\u002Fetc\u002Fopenldap\u002Fldap.conf.default' to '\u002Fopt\u002Fsplunk\u002Fetc\u002Fopenldap\u002Fldap.conf'.\nGenerating RSA private key, 1024 bit long modulus\n..............................................................++++++\n...++++++\ne is 65537 (0x10001)\nwriting RSA key\n\nGenerating RSA private key, 1024 bit long modulus\n........++++++\n........................................++++++\ne is 65537 (0x10001)\nwriting RSA key\n\nMoving '\u002Fopt\u002Fsplunk\u002Fshare\u002Fsplunk\u002Fsearch_mrsparkle\u002Fmodules.new' to '\u002Fopt\u002Fsplunk\u002Fshare\u002Fsplunk\u002Fsearch_mrsparkle\u002Fmodules'.\n\nSplunk> The Notorious B.I.G. D.A.T.A.\n\nChecking prerequisites...\n    Checking http port [8000]: open\n    Checking mgmt port [8089]: open\n    Checking configuration...  Done.\n        Creating: \u002Fopt\u002Fsplunk\u002Fvar\u002Flib\u002Fsplunk\n        Creating: \u002Fopt\u002Fsplunk\u002Fvar\u002Frun\u002Fsplunk\n        Creating: \u002Fopt\u002Fsplunk\u002Fvar\u002Frun\u002Fsplunk\u002Fappserver\u002Fi18n\n        Creating: \u002Fopt\u002Fsplunk\u002Fvar\u002Frun\u002Fsplunk\u002Fappserver\u002Fmodules\u002Fstatic\u002Fcss\n        Creating: \u002Fopt\u002Fsplunk\u002Fvar\u002Frun\u002Fsplunk\u002Fupload\n        Creating: \u002Fopt\u002Fsplunk\u002Fvar\u002Fspool\u002Fsplunk\n        Creating: \u002Fopt\u002Fsplunk\u002Fvar\u002Fspool\u002Fdirmoncache\n        Creating: \u002Fopt\u002Fsplunk\u002Fvar\u002Flib\u002Fsplunk\u002FauthDb\n        Creating: \u002Fopt\u002Fsplunk\u002Fvar\u002Flib\u002Fsplunk\u002FhashDb\n    Checking critical directories...    Done\n    Checking indexes...\n        Validated: _audit _blocksignature _internal _thefishbucket history main summary\n    Done\nNew certs have been generated in '\u002Fopt\u002Fsplunk\u002Fetc\u002Fauth'.\n    Checking filesystem compatibility...  Done\n    Checking conf files for typos...    Done\nAll preliminary checks passed.\n\nStarting splunk server daemon (splunkd)...  \nDone\n\nStarting splunkweb...  Generating certs for splunkweb server\nGenerating a 1024 bit RSA private key\n...............++++++\n................++++++\nwriting new private key to 'privKeySecure.pem'\n-----\nSignature ok\nsubject=\u002FCN=splunk\u002FO=SplunkUser\nGetting CA Private Key\nwriting RSA key\nDone\n\nIf you get stuck, we're here to help.  \nLook for answers here: http:\u002F\u002Fdocs.splunk.com\n\nThe Splunk web interface is at http:\u002F\u002Fsplunk:8000\n","text",[143,278,275],{"__ignoreMap":141},[15,280,281,282,284],{},"L’installation de Splunk est terminée, vous allez pouvoir ouvrir votre navigateur web.",[42,283],{},"\nL’interface de Splunk est disponible uniquement sur le port 8000 en http (version gratuite).",[10,286,288],{"id":287},"mise-en-route-de-splunk-sous-debian-7","Mise en route de Splunk sous Debian 7",[15,290,291],{},"Le Démarrage de Splunk se lance avec la commande :",[136,293,295],{"className":138,"code":294,"language":140,"meta":141,"style":141},"\u002Fopt\u002Fsplunk\u002Fbin\u002Fsplunk start\n",[143,296,297],{"__ignoreMap":141},[146,298,299,302],{"class":148,"line":149},[146,300,301],{"class":152},"\u002Fopt\u002Fsplunk\u002Fbin\u002Fsplunk",[146,303,304],{"class":156}," start\n",[15,306,307],{},"Le premier lien avec Splunk est la fenêtre suivante :",[15,309,310],{},[311,312],"img",{"alt":141,"src":313},"\u002Fimages\u002Fblog\u002Finstallation-splunk-sur-debian\u002F626419b00b.png",[15,315,316],{},"Après avoir complété les champs d’identification, le processus de configuration commence :",[15,318,319],{},[311,320],{"alt":141,"src":321},"\u002Fimages\u002Fblog\u002Finstallation-splunk-sur-debian\u002Feb611893f5.png",[15,323,324],{},"Il est fortement conseillé de changer le mot de passe, ensuite configurer le Splunk :",[15,326,327],{},[311,328],{"alt":141,"src":329},"\u002Fimages\u002Fblog\u002Finstallation-splunk-sur-debian\u002F56ed981d16.png",[15,331,332],{},"L’installation de Splunk est terminée.",[10,334,336],{"id":335},"conclusion","Conclusion",[15,338,339],{},"Cet article a présenté l’installation de Splunk sous Debian 7, depuis la création d’un compte et le téléchargement du paquet .deb jusqu’au premier démarrage de l’interface web sur le port 8000. L’installation s’est révélée rapide et ne nécessite aucune manipulation préalable particulière, ce qui rend cette solution de centralisation et d’analyse de logs accessible même en version gratuite (limitée à 500 Mo de logs par jour). Splunk constitue ainsi une bonne porte d’entrée pour découvrir la supervision et l’analyse de données machine.",[341,342,343],"style",{},"html pre.shiki code .sBMFI, html code.shiki .sBMFI{--shiki-light:#E2931D;--shiki-default:#FFCB6B;--shiki-dark:#FFCB6B}html pre.shiki code .sfazB, html code.shiki .sfazB{--shiki-light:#91B859;--shiki-default:#C3E88D;--shiki-dark:#C3E88D}html pre.shiki code .sMK4o, html code.shiki .sMK4o{--shiki-light:#39ADB5;--shiki-default:#89DDFF;--shiki-dark:#89DDFF}html pre.shiki code .sTEyZ, html code.shiki .sTEyZ{--shiki-light:#90A4AE;--shiki-default:#EEFFFF;--shiki-dark:#BABED8}html .light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html.light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html .default .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html.dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}",{"title":141,"searchDepth":345,"depth":345,"links":346},2,[347,348,349,350,351],{"id":12,"depth":345,"text":13},{"id":115,"depth":345,"text":116},{"id":244,"depth":345,"text":245},{"id":287,"depth":345,"text":288},{"id":335,"depth":345,"text":336},null,"\u002Fimages\u002Fblog\u002Finstallation-splunk-sur-debian\u002Ff8405ad901.jpg",true,"2014-01-14","Superviser et gérer tous les types d'infrastructures. Une solution Big Data qui analyse vos données. L'installation est facile et rapide.","md",{},"\u002Fblog\u002Finstallation-splunk-sur-debian",{"title":5,"description":356},"installation-splunk-sur-debian","blog\u002Finstallation-splunk-sur-debian","dOIfsVnxMtPeS1AnPXNSDW59sb4jViTzk01KZZMvTgQ",[365,371,379,385,390,396,402,408],{"title":366,"path":367,"stem":368,"date":369,"cover":370,"categories":352,"children":-1},"Emprisonner un utilisateur ssh sous linux","\u002Fblog\u002Femprisonner-utilisateur-ssh-sous-linux","blog\u002Femprisonner-utilisateur-ssh-sous-linux","2014-02-23","\u002Fimages\u002Fblog\u002Femprisonner-utilisateur-ssh-sous-linux\u002F5e5571284a.png",{"title":372,"path":373,"stem":374,"date":375,"cover":376,"categories":377,"children":-1},"Découvrez la magie : Adobe Creative Cloud !","\u002Fblog\u002Fdecouvrez-magie-adobe-creative-cloud","blog\u002Fdecouvrez-magie-adobe-creative-cloud","2014-02-06","\u002Fimages\u002Fblog\u002Fdecouvrez-magie-adobe-creative-cloud\u002Fc5befd8385.jpg",[378],"Évènement",{"title":380,"path":381,"stem":382,"date":383,"cover":384,"categories":352,"children":-1},"Le Fitbit Force, précurseur des bracelets connectés","\u002Fblog\u002Ffitbit-force-precurseur-des-bracelets-connectes","blog\u002Ffitbit-force-precurseur-des-bracelets-connectes","2014-01-29","\u002Fimages\u002Fblog\u002Ffitbit-force-precurseur-des-bracelets-connectes\u002F591236ebce.jpg",{"title":386,"path":387,"stem":388,"date":383,"cover":389,"categories":352,"children":-1},"Installation de Plex Media Server sur Debian 8","\u002Fblog\u002Finstallation-plex-media-server-sur-debian","blog\u002Finstallation-plex-media-server-sur-debian","\u002Fimages\u002Fblog\u002Finstallation-plex-media-server-sur-debian\u002Fea86a7e30d.png",{"title":391,"path":392,"stem":393,"date":394,"cover":395,"categories":352,"children":-1},"Installation de Clipperz sur Debian 7","\u002Fblog\u002Finstallation-clipperz-sur-debian","blog\u002Finstallation-clipperz-sur-debian","2014-01-12","\u002Fimages\u002Fblog\u002Finstallation-clipperz-sur-debian\u002Fd61b13f064.png",{"title":397,"path":398,"stem":399,"date":400,"cover":401,"categories":352,"children":-1},"Installation de OpenVPN ALS Adito sur CentOS 6.5","\u002Fblog\u002Finstallation-openvpn-als-adito-sur-centos","blog\u002Finstallation-openvpn-als-adito-sur-centos","2014-01-05","\u002Fimages\u002Fblog\u002Finstallation-openvpn-als-adito-sur-centos\u002Fa500a01b28.png",{"title":403,"path":404,"stem":405,"date":406,"cover":407,"categories":352,"children":-1},"Installation des proxy inverses Pound et Varnish","\u002Fblog\u002Finstallation-des-proxy-inverses-pound-varnish","blog\u002Finstallation-des-proxy-inverses-pound-varnish","2013-12-31","\u002Fimages\u002Fblog\u002Finstallation-des-proxy-inverses-pound-varnish\u002Fec4618d7ad.jpg",{"title":409,"path":410,"stem":411,"date":412,"cover":413,"categories":414,"children":-1},"Mon utilisation du système propriétaire Windows 8.1","\u002Fblog\u002Fmon-utilisation-systeme-proprietaire-windows","blog\u002Fmon-utilisation-systeme-proprietaire-windows","2013-12-27","\u002Fimages\u002Fblog\u002Fmon-utilisation-systeme-proprietaire-windows\u002Fb36cbda2fc.jpg",[415],"Microsoft",[],1786644879865]