Is Splunk supported on Red Hat Enterprise Linux 7 running Linux kernel 3.10?

[keithyap]

Would Splunk work with RHEL 7?

From what I have read, RHEL 7 runs Linux kernel 3.10 and the documentation in Splunk just states 2.6+.

[CurryPan]

Linux kernel 3.x and later (32-bit) was deprecated in 6.3 so you cannot upgrade to Splunk ver.6.3.x.

http://docs.splunk.com/Documentation/Splunk/6.3.0/Installation/Systemrequirements#Unix_operating_sys...

Note: Linux kernel 3.x and later (64-bit) should be supported in Splunk ver.6.3.x.

[mcronkrite]

IF YOU HAVE RHEL7
ADD THE FOLLOWING "SLEEP 60" to your /etc/init.d/

#
Sleep 60
RETVAL=0

. /etc/init.d/functions

splunk_start() {

[triest]

Could you please expand on why this is/was necessary? I realize this answer is quite old by now, but its always helpful to understand WHY something is recommended.

[jmantor]

Macy, could you elaborate on this, please?

[nnmiller]

Presumably the sleep delay allows PAM to be fully spun up so that ulimit settings are applied properly when Splunk starts. Another alternative and more details are discussed in George Starcher's blog post Splunk Ulimits and You.

[hortonew · Accepted solution]

The following document shows Linux, 3.0+ is supported.

http://docs.splunk.com/Documentation/Splunk/6.1.3/Installation/Systemrequirements#Supported_OSes

[jrodriguezinter]

So, the doc refers to "3.0+". Does that mean 3.10 would be covered?

Also, anyone know why the /etc/init.d change above is recommended?

[hortonew]

Latest doc lists 3.x covering 3.10

http://docs.splunk.com/Documentation/Splunk/6.4.2/Installation/Systemrequirements#Supported_OSes

[jrodriguezinter]

Great. Thank you.

-Joseph