Splunk Environments

The installation process for the Tenable Attack Surface Management for Splunk varies based on your Splunk environment.

Deployment Types

Single-server, distributed deployment, and cloud instance options are available.

Single-Server Deployment

In a single-server deployment, a single instance of Splunk Enterprise works as a data collection node, indexer, and search head. Use this instance to install the . Complete the setup to start data collection.

In a single-server deployment, a single instance of Splunk Enterprise works as a data collection node, indexer, and search head. Use this instance to install the Tenable Attack Surface Management Add-On. Complete the setup for the Tenable Attack Surface Management Add-On to start data collection.

Distributed Deployment

In a distributed deployment, install Splunk on at least two instances. One node works as a search head, while the other node works as an indexer for data collection.

Cloud Instance

In Splunk Cloud, the data indexing takes place in a cloud instance.

You can install the application via a command line or from the Splunk user interface.