Deployment Architecture

Error when installing splunkforwarde in Linux SUSE

akilesbailo16
New Member

hello, when executing the command "zypper in ...." it gives me the following error: 'tmpRPMcache:splunkforwarder=0:7.0.2-03bbabbd5c0f' not found in package names. Trying capabilities. why does it happen?

0 Karma

vinkumar_splunk
Splunk Employee
Splunk Employee

Can you try the below and check if it works:

rpm -ivh --nodeps splunk-7.1.6-8f009a3f5353-linux-2.6-x86_64.rpm

0 Karma

p_gurav
Champion

Hi,

Can you try :

sudo rpm -ivh /opt/splunk-6.5.3-36937ad027d4-linux-2.6-x86_64.rpm --force 

Also if this doesn't work try installing tar file instead rpm.

0 Karma

deepashri_123
Motivator

Hey akilesbailo16,

You can refer the following doc for steps to install universal forwarder on linux.
http://docs.splunk.com/Documentation/Forwarder/latest/Forwarder/Installanixuniversalforwarder

Let me know if this helps!!!

0 Karma

akilesbailo16
New Member

Hello, I still can not install it

0 Karma

deepashri_123
Motivator

What is the error that you are getting? Was the file downloaded correctly?

Try running the following command.
wget -O splunkforwarder-7.0.2-03bbabbd5c0f-linux-2.6-x86_64.rpm 'https://www.splunk.com/bin/splunk/DownloadActivityServlet?architecture=x86_64&platform=linux&version...'

You can refer this answer as well:
https://answers.splunk.com/answers/219034/which-forwarder-do-i-need-to-install-on-suse-linux.html

0 Karma

akilesbailo16
New Member

When running rpm -i gives me the following error:

rpm -i splunkforwarder-7.0.2-03bbabbd5c0f-linux-2.6-x86_64\ (2).rpm
warning: splunkforwarder-7.0.2-03bbabbd5c0f-linux-2.6-x86_64 (2).rpm: Header V4 DSA signature: NOKEY, key ID 653fb112
package splunkforwarder-7.0.2-03bbabbd5c0f.x86_64 is intended for a x86_64 architecture

for what is this?

0 Karma

deepashri_123
Motivator

What version of linux are you using and is it 32-bit server or 64-bit?

0 Karma

akilesbailo16
New Member

i using 32 bits

0 Karma

deepashri_123
Motivator

Then try using rpm package for 32 bit , that should work.

0 Karma

akilesbailo16
New Member

I've tried both versions, both give me the same result

0 Karma
Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

In December, the Splunk Threat Research Team had 1 release of new security content via the Enterprise Security ...

Why am I not seeing the finding in Splunk Enterprise Security Analyst Queue?

(This is the first of a series of 2 blogs). Splunk Enterprise Security is a fantastic tool that offers robust ...

Index This | What are the 12 Days of Splunk-mas?

December 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...