Installing uberAgent for Splunk is quick and straightforward. Due to the product’s flexibility, there is often more than one way of doing things. In such a case we describe the recommended configuration and link to supported alternatives.

Prerequisites

• Read about the architecture options.
• If you do not have a running Splunk installation yet set up Splunk.
• Download uberAgent and extract the archive. You should have a directory uberAgent components with the following content:
  • A subdirectory uberAgent_endpoint
  • Packed Splunk app uberAgent_indexer.tgz
  • Packed Splunk app uberAgent_searchhead.tgz

Installation Steps

Installing uberAgent consists of the following steps:

1. Installing the Splunk apps
2. Installing the endpoint agent
3. Installing Splunk Universal Forwarder (optional)
4. Installing the Chrome browser extension (optional)
5. Installing the Internet Explorer Browser Extension (optional)
6. Installing the Firefox Browser Extension (optional)