All Apps and Add-ons

ARM v7 support? (RPI3, etc)

dsctm3
Path Finder

The Splunk forwarder currently available (as of 6.6) is only packaged for ARM v6 only and not ARM v7

Any word on being able to obtain a Splunk Forwarder package for ARM v7?

Reasoning:
Newer versions of Raspberry PI (such as RPI3) and similar boards such as beaglebone are using the ARM v7 architecture. ARM v6 code as far as I am aware cannot run on ARM v7 architecture.

Would be nice to use Splunk for a project I have using raspberry PI's - relying on rsyslog to forward logs via network-base syslog not ideal.

francesco_brizz
Engager

Any news for arm v7 ?

0 Karma

pbalsley
Path Finder

Splunk now has a normal linux ARM UF you can download from their normal splunk download section. The App is no longer the correct UF for the pi.

I have it running on my Pi v3.

0 Karma

dsctm3
Path Finder

Are you certain? What image are you running on the PI? (Ubuntu, Raspian?) The forwarder package available under Splunk Downloads (no, not the app, the actual Universal forwarder) is listing availability only or ARM v6... I tried just for fun and it wouldn't execute.

0 Karma

pbalsley
Path Finder

uname -a
Linux pi-01 4.9.28-v7+ #998 SMP Mon May 15 16:55:39 BST 2017 armv7l GNU/Linux

I have the ARM splunk UF v 6.6.1 running on two Pi's v3 model b

0 Karma

dsctm3
Path Finder

Yeah, looks like Raspian. Will take a look again with Raspian and see if it's just a Ubuntu/PI issue.

0 Karma

pbalsley
Path Finder

Looks like Splunk took down the APP link for this. Normally this means they are updating the app and it will be published soon. I hope so I'm trying to deploy several PI v3 and want to use the forwarder!! 🙂

0 Karma
Get Updates on the Splunk Community!

Last Chance to Submit Your Paper For BSides Splunk - Deadline is August 12th!

Hello everyone! Don't wait to submit - The deadline is August 12th! We have truly missed the community so ...

Ready, Set, SOAR: How Utility Apps Can Up Level Your Playbooks!

 WATCH NOW Powering your capabilities has never been so easy with ready-made Splunk® SOAR Utility Apps. Parse ...

DevSecOps: Why You Should Care and How To Get Started

 WATCH NOW In this Tech Talk we will talk about what people mean by DevSecOps and deep dive into the different ...