Splunk Environments
The installation process for the Tenable Attack Surface Management for Splunk varies based on your Splunk environment.
Deployment Types
Single-server, distributed deployment, and cloud instance options are available.
Single-Server Deployment
In a single-server deployment, a single instance of Splunk Enterprise works as a data collection node, indexer, and search head. Use this instance to install the . Complete the setup to start data collection.
In a single-server deployment, a single instance of Splunk Enterprise works as a data collection node, indexer, and search head. Use this instance to install the Tenable Attack Surface Management Add-On. Complete the setup for the Tenable Attack Surface Management Add-On to start data collection.
Distributed Deployment
In a distributed deployment, install Splunk on at least two instances. One node works as a search head, while the other node works as an indexer for data collection.
Cloud Instance
In Splunk Cloud, the data indexing takes place in a cloud instance.
You can install the application via a command line or from the Splunk user interface.