Getting Data In

What are the dependencies for Universal Forwarder setup on Linux?

jkmurthy
Explorer

We are trying to install Universal Forwarder package (v 6.4.1) using the yum command by making use of the Splunk rpm file. The OS version is Redhat Linux 5.11. When we execute the command, during the Dependency Resolution phase, we get a list of 86 packages which include openssl, less, bash and so on and asking for a confirmation about whether to proceed with the set up of all these dependent packages.

Could you please confirm how these dependencies are made use of and whether we can go ahead and make use of the --no-deps option of the rpm command, as we are not sure if the installation of so many packages can cause any issues to the current processes running on the system.

0 Karma

esix_splunk
Splunk Employee
Splunk Employee

There should be no dependancies for the Splunk UF / HF to be installed on a linux box. Read the notes here : http://docs.splunk.com/Documentation/Splunk/latest/Installation/InstallonLinux . You should walk through the dependencies and see what the relationship is.

It's possible that you dont have bash, or another OS component installed, and its trying to install all the dependencies based on that or something Redhat is wanting to install based on something that your OS is missing in order to properly run yum...

0 Karma

jkmurthy
Explorer

Thanks for the response esix. The openssl, tar etc commands seems to work when we invoke them manually from the command prompt. Can we go ahead and use the --no-deps option of the rpm command and proceed with the installation ? I hope Splunk does not need any of those dependent packages to run smoothly.

0 Karma

ddrillic
Ultra Champion

A similar thread at Forwarder Install via RPM: Failed Dependencies

@jchensor said -

-- So I used the --nodeps option when running rpm after confirming everything was there, and it all went through just fine and is working well now.

Is it possible for you to simply use the tarball installation?

0 Karma
Get Updates on the Splunk Community!

ICYMI - Check out the latest releases of Splunk Edge Processor

Splunk is pleased to announce the latest enhancements to Splunk Edge Processor.  HEC Receiver authorization ...

Introducing the 2024 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...

Introducing the 2024 Splunk MVPs!

We are excited to announce the 2024 cohort of the Splunk MVP program. Splunk MVPs are passionate members of ...