Deployment Architecture

Error when installing splunkforwarde in Linux SUSE

akilesbailo16
New Member

hello, when executing the command "zypper in ...." it gives me the following error: 'tmpRPMcache:splunkforwarder=0:7.0.2-03bbabbd5c0f' not found in package names. Trying capabilities. why does it happen?

0 Karma

vinkumar_splunk
Splunk Employee
Splunk Employee

Can you try the below and check if it works:

rpm -ivh --nodeps splunk-7.1.6-8f009a3f5353-linux-2.6-x86_64.rpm

0 Karma

p_gurav
Champion

Hi,

Can you try :

sudo rpm -ivh /opt/splunk-6.5.3-36937ad027d4-linux-2.6-x86_64.rpm --force 

Also if this doesn't work try installing tar file instead rpm.

0 Karma

deepashri_123
Motivator

Hey akilesbailo16,

You can refer the following doc for steps to install universal forwarder on linux.
http://docs.splunk.com/Documentation/Forwarder/latest/Forwarder/Installanixuniversalforwarder

Let me know if this helps!!!

0 Karma

akilesbailo16
New Member

Hello, I still can not install it

0 Karma

deepashri_123
Motivator

What is the error that you are getting? Was the file downloaded correctly?

Try running the following command.
wget -O splunkforwarder-7.0.2-03bbabbd5c0f-linux-2.6-x86_64.rpm 'https://www.splunk.com/bin/splunk/DownloadActivityServlet?architecture=x86_64&platform=linux&version...'

You can refer this answer as well:
https://answers.splunk.com/answers/219034/which-forwarder-do-i-need-to-install-on-suse-linux.html

0 Karma

akilesbailo16
New Member

When running rpm -i gives me the following error:

rpm -i splunkforwarder-7.0.2-03bbabbd5c0f-linux-2.6-x86_64\ (2).rpm
warning: splunkforwarder-7.0.2-03bbabbd5c0f-linux-2.6-x86_64 (2).rpm: Header V4 DSA signature: NOKEY, key ID 653fb112
package splunkforwarder-7.0.2-03bbabbd5c0f.x86_64 is intended for a x86_64 architecture

for what is this?

0 Karma

deepashri_123
Motivator

What version of linux are you using and is it 32-bit server or 64-bit?

0 Karma

akilesbailo16
New Member

i using 32 bits

0 Karma

deepashri_123
Motivator

Then try using rpm package for 32 bit , that should work.

0 Karma

akilesbailo16
New Member

I've tried both versions, both give me the same result

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Your Feedback. Our Roadmap. Visit the PX Feedback Booth at .conf26

You use Splunk every day, come and help shape what's next.  Save Your Seat: Product-Focused Sessions at ...

Agentic SOC Triage: Investigating Splunk ES Notables with MCP Server and a Local LLM

The Problem: Too Many Alerts, Too Little Context Security operations teams running Splunk Enterprise Security ...

Painting a Clearer Picture: Creating Cross-Domain Visibility with AI Canvas

Watch Now Painting a Clearer Picture: Creating Cross-Domain Visibility with AI Canvas     Do you ever feel ...