Deployment Architecture

Is Splunk supported on Red Hat Enterprise Linux 7 running Linux kernel 3.10?

keithyap
Path Finder

Would Splunk work with RHEL 7?

From what I have read, RHEL 7 runs Linux kernel 3.10 and the documentation in Splunk just states 2.6+.

Tags (3)
0 Karma
1 Solution

CurryPan
Communicator

Linux kernel 3.x and later (32-bit) was deprecated in 6.3 so you cannot upgrade to Splunk ver.6.3.x.

http://docs.splunk.com/Documentation/Splunk/6.3.0/Installation/Systemrequirements#Unix_operating_sys...

Note: Linux kernel 3.x and later (64-bit) should be supported in Splunk ver.6.3.x.

mcronkrite
Splunk Employee
Splunk Employee

IF YOU HAVE RHEL7
ADD THE FOLLOWING "SLEEP 60" to your /etc/init.d/

#
Sleep 60
RETVAL=0

. /etc/init.d/functions

splunk_start() {

triest
Communicator

Could you please expand on why this is/was necessary? I realize this answer is quite old by now, but its always helpful to understand WHY something is recommended.

0 Karma

jmantor
Path Finder

Macy, could you elaborate on this, please?

0 Karma

nnmiller
Contributor

Presumably the sleep delay allows PAM to be fully spun up so that ulimit settings are applied properly when Splunk starts. Another alternative and more details are discussed in George Starcher's blog post Splunk Ulimits and You.

0 Karma

hortonew
Builder

jrodriguezinter
New Member

So, the doc refers to "3.0+". Does that mean 3.10 would be covered?

Also, anyone know why the /etc/init.d change above is recommended?

0 Karma

jrodriguezinter
New Member

Great. Thank you.

-Joseph

0 Karma
Get Updates on the Splunk Community!

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...

What's new in Splunk Cloud Platform 9.1.2312?

Hi Splunky people! We are excited to share the newest updates in Splunk Cloud Platform 9.1.2312! Analysts can ...

What’s New in Splunk Security Essentials 3.8.0?

Splunk Security Essentials (SSE) is an app that can amplify the power of your existing Splunk Cloud Platform, ...