topic Re: Why am I receiving zsh: exec format error while installing Splunk with Kali Linux VM? in Installation

Why am I receiving zsh: exec format error while installing Splunk with Kali Linux VM?

kevissadev — Tue, 17 May 2022 20:08:40 GMT

I keep getting this error when trying to start splunk, can anyone assist me? I am trying to install splunk within Kali Linux VM

zsh: exec format error: ./splunk

Re: Why am I receiving zsh: exec format error while installing Splunk with Kali Linux VM?

Stefanie — Wed, 18 May 2022 13:54:59 GMT

@kevissadev ,

Which version of the Splunk software did you install? For Linux there's a few different versions you can download. If you used the 64-bit tgz maybe try the deb version?

Within the Linux world that error pops up when the executable was compiled to work on a different distro.

Re: Why am I receiving zsh: exec format error while installing Splunk with Kali Linux VM?

isoutamo — Wed, 18 May 2022 15:00:25 GMT

Splunk server is supported only in intel/amd platforms in linux. If you have e.g. ARM then there haven't any working version for it (only Apple M1 rosetta2 can used on macOS). ARM version can found only for UF not for server.

Re: Why am I receiving zsh: exec format error while installing Splunk with Kali Linux VM?

kevissadev — Wed, 18 May 2022 16:50:27 GMT

I Installed the Linux_64.tgz version to my Kali Linux VM. I have a Macbook Pro A1 if that helps. Any suggestions?

Re: Why am I receiving zsh: exec format error while installing Splunk with Kali Linux VM?

kevissadev — Wed, 18 May 2022 16:51:27 GMT

So does this mean I cannot install Splunk through the Kali Linux VM since I am using A1 chip with macbook?

Re: Why am I receiving zsh: exec format error while installing Splunk with Kali Linux VM?

Stefanie — Wed, 18 May 2022 17:14:49 GMT

There isn't a supported way to install Splunk Enterprise on unsupported hardware.

Even if you were able to get Splunk to start, it's not compatible and would likely have many unexpected problems.

Maybe a better solution would be to try running Splunk in a Docker container?
I've never tried it so its just a suggestion. https://github.com/Splunk/docker-Splunk

Re: Why am I receiving zsh: exec format error while installing Splunk with Kali Linux VM?

kevissadev — Wed, 18 May 2022 17:50:02 GMT

Can you let me know what exactly isn’t compatible? Is it the Macbook with A1 processor or Kali Linux VM I am using? Only asking because if I need to get another laptop I can do that do.

Re: Why am I receiving zsh: exec format error while installing Splunk with Kali Linux VM?

kevissadev — Wed, 18 May 2022 17:54:48 GMT

M1 chip*

Re: Why am I receiving zsh: exec format error while installing Splunk with Kali Linux VM?

isoutamo — Thu, 19 May 2022 05:43:50 GMT

Unfortunately that's is the current situation. Those virtualisation softwares cannot use macOS's Rosetta2 layer. There is idea to port splunk also to AARM, but I thing that there is not enough votes for it yet?

https://ideas.splunk.com/ideas/EID-I-515 seems to be a future prospect, so we are willing more votes for it to bring it up on pile 😉

r. Ismo