when the Splunk 5.x will end of Life, we are running the Splunk Enterprise with LInux OS. as I know the Splunk 5.x already ends of support in 30Nov2017, may I confirm it's correct?
End of support also means end of development support, no patches or fixes will be released for splunk 5 (and older).
So if the Spunk 5 encounters a problem, a security vulnerability or an OS compatibility problem, it will not get fixed.
We recommend to upgrade to a supported version before it happens (current supported versions are 6 and 7)