Deployment Architecture

Estimated date/release for end of support of Linux kernel 2.6

chclemence
Explorer

Hello,

I see that Linux kernel 2.6 is deprecated since 1 year (on April 2018, with Splunk 7.1.0).
https://docs.splunk.com/Documentation/Splunk/7.1.0/ReleaseNotes/Deprecatedfeatures#Platform_support

I would like to know which future version of Splunk will "remove" this kernel version, and if there is an estimated release date.

Regards,
Christophe

0 Karma

eshafaq
New Member

I see that Splunk 9.0.4 might still have compatibility with Linux kernel 2.6 "linux-2.6". Despite Splunk's documentation indicating the deprecation of kernel 2.6 since Splunk Enterprise 8.2.9, the RPM package name ("splunk-9.0.4-de405f4a7979-linux-2.6-x86_64.rpm") for Splunk 9.0.4 suggests it is still built on and for this kernel version. Additionally, RHEL 6, which uses kernel 2.6, remains in extended support until June 30, 2024. This means Splunk 9.0.4 "can run" on kernel 2.6 under RHEL 6 which is still under extended supported. (wow!, 18 years of support for 2.6 kernel from RHEL)
"https://download.splunk.com/products/splunk/releases/9.0.4/linux/splunk-9.0.4-de405f4a7979-linux-2.6..."

The Splunk support page might not reflect this compatibility, so even though Splunk 9.0.4 package name might indicate that its built on linux kernel 2.6 and RHEL 6 is still under extended support, You might have a hard time making your case to your boss that this is a good idea, let alone to Splunk Support on this configuration.

Cheers,
Eddie

0 Karma

esix_splunk
Splunk Employee
Splunk Employee

Per the doc file

Linux Kernel 2.6 x86-64: Enterprise and Free/Trial support is deprecated and might be removed entirely in a future release.

This means we don't have a solid time line defined for removing it, but at any time we can drop support for it. As advised, if you are concerned about this, please open a support ticket / talk to your account manager about this. This way our product team can evaluate if we should/not drop support for this..

Otherwise, upgrade! 🙂

0 Karma

adonio
Ultra Champion

Please contact Splunk Support or your Splunk SE if you are a paying customer

0 Karma
Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.
Get Updates on the Splunk Community!

Tech Talk Recap | Mastering Threat Hunting

Mastering Threat HuntingDive into the world of threat hunting, exploring the key differences between ...

Observability for AI Applications: Troubleshooting Latency

If you’re working with proprietary company data, you’re probably going to have a locally hosted LLM or many ...

Splunk AI Assistant for SPL vs. ChatGPT: Which One is Better?

In the age of AI, every tool promises to make our lives easier. From summarizing content to writing code, ...