1.官方文档
http://docs.splunk.com/Documentation/Splunk/6.2.0/Installation/InstallonLinux
2.官方下载
http://docs.splunk.com/download
3.步骤
# tar -zxvf splunk-6.2.0-237341-Linux-x86_64.tgz -------解压
# cd /opt/splunk/bin/
# ./splunk start
需要许可证，刚开始只要随意按个字母即可
如果出现ERROR: The http port [8000] is already bound. Splunk needs to use this port.换个端口就可以了，我换了8001端口
#netstat -ant-------------------------------------------查看是否安装成功
#ln -s /usr/local/splunk/bin/splunk /etc/rc2.d/S80splunk---开机自动启动
#ln -s /usr/local/splunk/bin/splunk /etc/init.d/splunk------放到服务器
4.登陆http://localhost:8001，刚开始，用户名：admin 密码：changeme 进入得到界面。