Install the Log Correlation Engine Splunk Client

To install the Tenable Log Correlation Engine Splunk Client:

Note: All shell commands need to be executed by a user with root privileges.

  1. Copy the downloaded client package to the host where it will be installed. The Log Correlation Engine Splunk Client can be installed directly on a Splunk server.

  2. Verify the MD5 checksum of the client package against the MD5 checksum found in the release notes.

    Example:

    # md5sum lce_splunk-4.6.0-el6.x86_64.rpm

    da9f07886a693fb69cba1dbd5c3eba31  lce_splunk-4.6.0-el6.x86_64.rpm

  3. To initiate the installation, type the following command:

    rpm -ivh <package name>, where <package name> is the name of the client package.

    Example:

    # rpm -ivh lce_splunk-4.6.0-el6.x86_64.rpm

    Preparing... ########################################### [100%]

    1:lce_splunk ########################################### [100%]

    Checking for existence of TAG file at /etc/tenable_tag ...

    Writing TAG to /etc/tenable_tag ...