Deployment Architecture

Is Splunk supported on Red Hat Enterprise Linux 7 running Linux kernel 3.10?

Path Finder

Would Splunk work with RHEL 7?

From what I have read, RHEL 7 runs Linux kernel 3.10 and the documentation in Splunk just states 2.6+.

Tags (3)
0 Karma
1 Solution

Builder

Communicator

Linux kernel 3.x and later (32-bit) was deprecated in 6.3 so you cannot upgrade to Splunk ver.6.3.x.

http://docs.splunk.com/Documentation/Splunk/6.3.0/Installation/Systemrequirements#Unix_operating_sys...

Note: Linux kernel 3.x and later (64-bit) should be supported in Splunk ver.6.3.x.

Splunk Employee
Splunk Employee

IF YOU HAVE RHEL7
ADD THE FOLLOWING "SLEEP 60" to your /etc/init.d/

#
Sleep 60
RETVAL=0

. /etc/init.d/functions

splunk_start() {

Communicator

Could you please expand on why this is/was necessary? I realize this answer is quite old by now, but its always helpful to understand WHY something is recommended.

0 Karma

Path Finder

Macy, could you elaborate on this, please?

0 Karma

Contributor

Presumably the sleep delay allows PAM to be fully spun up so that ulimit settings are applied properly when Splunk starts. Another alternative and more details are discussed in George Starcher's blog post Splunk Ulimits and You.

0 Karma

Builder

New Member

So, the doc refers to "3.0+". Does that mean 3.10 would be covered?

Also, anyone know why the /etc/init.d change above is recommended?

0 Karma

Builder

New Member

Great. Thank you.

-Joseph

0 Karma