,
6 tweets,
3 min read
Read on Twitter
For $10 on @DigitalOcean, you can setup a Ubuntu instance with #Splunk and #BOTS v2 dataset.
Here's how:
Here's how:
1. digitalocean.com
- Referral link - m.do.co/c/e6e69f709f5f
- Create account. Add $10 bucks.
2. SSH to instance.
- WGET Splunk (splunk.com/en_us/download…)
- Install Splunk
use the DEB package for ease -
dpkg -i Splunk.deb
Start Splunk:
\opt\splunk\bin\splunk start
- Referral link - m.do.co/c/e6e69f709f5f
- Create account. Add $10 bucks.
2. SSH to instance.
- WGET Splunk (splunk.com/en_us/download…)
- Install Splunk
use the DEB package for ease -
dpkg -i Splunk.deb
Start Splunk:
\opt\splunk\bin\splunk start
I tend to use the tar file for install - docs.splunk.com/Documentation/…
tar xvzf splunk.tgz -C /opt
tar xvzf splunk.tgz -C /opt
You'll also need the pre-req apps/TAs:
(found on the repo)
I save the zips to a local dir, so when I rebuild later, I have them available.
Upload apps via UI or install in \opt\splunk\etc\apps\ dir.
.\splunk restart
(found on the repo)
I save the zips to a local dir, so when I rebuild later, I have them available.
Upload apps via UI or install in \opt\splunk\etc\apps\ dir.
.\splunk restart
and DONE. You have BOTSv2 running pretty smooth on this ubuntu instance. Now get to hunting!
