I am working to upgrade SPLUNK Version from 8.0.1 to 8.2.2.1 (Solaris 11.3 O.S.). After the upgrade I see the below output, which is fine. pkg info -l splunkforwarder Name: application/splunkforwarder Summary: Splunk Universal Forwarder Description: Splunk> The platform for machine data. Category: Applications/Internet State: Installed Publisher: splunk Version: 8.2.2.1 Build Release: 191762265523787 Branch: None Packaging Date: Wed Sep 15 09:07:09 2021 Last Install Time: Fri Mar 25 17:43:36 2022 Size: 58.43 MB FMRI: pkg://splunk/application/splunkforwarder@8.2.2.1,191762265523787:20210915T090709Z when I try to start splunk I see the below error:  ./splunk start ld.so.1: splunk: fatal: relocation error: file splunk: symbol in6addr_any: referenced symbol not found Killed  Please any suggestion on this specific error ?  Thanks.  RB             ... View more

Hi, I have a UNIX server Solaris 8 that ac/behave like a Splunk Proxy server for 2 other UNIX servers Solaris 8. In other words the 2 Solaris servers send the syslog file to the UNIX Solaris Proxy server. I am trying to create a query that will shows the events coming from the 2 UNIX Solaris 8 servers. I run the below query for example: index=nix* serverproxy* | eval Status=if(like(source, "%FirstUNIXSolaris8%"), 1, 0) I am not getting any event that will show the FirstUNIX Solaris8 name/hostname. Please any suggestion how to create the specific query ? Thanks, Regards. Roberto     ... View more

I have installed SUF 7.3.4 on UNIX(Solaris 10) Server and when I run splunk list guid or splunk list monitor I am getting "Splunk username". I have a user "splunkma" configured that I use to stop / start splunkd process. Please advice. Thanks. RB   ... View more

I am getting the below error, looking the splunkd.log file. DC:DeploymentClient - channel=tenantService/handshake Will retry sending handshake message to DS; err=not_connected Please any suggestion ?     ... View more

HiI need to uninstall the package: application/splunkforwarder from a  LOCAL WHOLE ROOT ZONE Solaris 11.3 O.S. The WHOLE ROOT ZONE is running on a  Global zone Solaris 11.3 (which is the Container/physical server). Please let me know if you have any suggestion. Thanks. Roberto ... View more

I need to remove the splunk pkg version currently running on a server Solaris 11.3 SPARC, when I run the pkg uninstall command in dry mode I see that it will be removing 2 pkgs shell/ksh and splunkforwarder, I am not sure why it will remove shell/ksh since I have asked only to remove the splunkforwarder pkg. Any suggestion will be great. Thanks. server1# pkg uninstall -nv application/splunkforwarder --> dry run Packages to remove: 2 Estimated space available: 330.61 GB Estimated space to be consumed: 197.91 MB Create boot environment: No Create backup boot environment: No Rebuild boot archive: No Changed packages: solaris shell/ksh 20110208,5.11-0.175.1.0.0.21.0:20120723T173801Z -> None splunk application/splunkforwarder 7.0.2,4104575081487:20180125T230423Z -> None ... View more

Solaris SPARC O.S. version 11.3 I have installed splunk version 7.0.2, when I start splunk I am getting the below error. Any suggestion will be great. Thanks. server1:/etc/rc3.d# pkg info splunkforwarder Name: application/splunkforwarder Summary: Splunk Universal Forwarder Description: Splunk> The platform for machine data. Category: Applications/Internet State: Installed Publisher: splunk Version: 7.0.2 Build Release: 4104575081487 Branch: None Packaging Date: Thu Jan 25 23:04:23 2018 Last Install Time: Wed Jul 24 13:27:31 2019 Size: 57.81 MB FMRI: pkg://splunk/application/splunkforwarder@7.0.2,4104575081487:20180125T230423Z /etc/rc3.d/S80splunk -> ../init.d/splunk ./S80splunk start Starting Splunk... ld.so.1: splunkd: fatal: relocation error: file /opt/splunkforwarder/bin/splunkd: symbol __clz_tab: referenced symbol not found ld.so.1: splunkd: fatal: relocation error: file /opt/splunkforwarder/bin/splunkd: symbol __clz_tab: referenced symbol not found ld.so.1: splunkd: fatal: relocation error: file /opt/splunkforwarder/bin/splunkd: symbol __clz_tab: referenced symbol not found Did not find "disabled" setting of "kvstore" stanza in server bundle. Splunk> Another one. Checking prerequisites... ld.so.1: splunkd: fatal: relocation error: file /opt/splunkforwarder/bin/splunkd: symbol __clz_tab: referenced symbol not found Checking mgmt port [8089]: ld.so.1: splunkd: fatal: relocation error: file /opt/splunkforwarder/bin/splunkd: symbol __clz_tab: referenced symbol not found open Checking kvstore port [8191]: ld.so.1: splunkd: fatal: relocation error: file /opt/splunkforwarder/bin/splunkd: symbol __clz_tab: referenced symbol not found open ld.so.1: splunkd: fatal: relocation error: file /opt/splunkforwarder/bin/splunkd: symbol __clz_tab: referenced symbol not found ld.so.1: splunkd: fatal: relocation error: file /opt/splunkforwarder/bin/splunkd: symbol __clz_tab: referenced symbol not found ERROR: pid 25909 terminated with signal 9 SSL certificate generation failed. ... View more