Deployment Architecture
Highlighted

Is Splunk supported on Red Hat Enterprise Linux 7 running Linux kernel 3.10?

Path Finder

Would Splunk work with RHEL 7?

From what I have read, RHEL 7 runs Linux kernel 3.10 and the documentation in Splunk just states 2.6+.

Tags (3)
0 Karma
Highlighted

Re: Is Splunk supported on Red Hat Enterprise Linux 7 running Linux kernel 3.10?

Builder
Highlighted

Re: Is Splunk supported on Red Hat Enterprise Linux 7 running Linux kernel 3.10?

New Member

So, the doc refers to "3.0+". Does that mean 3.10 would be covered?

Also, anyone know why the /etc/init.d change above is recommended?

0 Karma
Highlighted

Re: Is Splunk supported on Red Hat Enterprise Linux 7 running Linux kernel 3.10?

Builder
Highlighted

Re: Is Splunk supported on Red Hat Enterprise Linux 7 running Linux kernel 3.10?

New Member

Great. Thank you.

-Joseph

0 Karma
Highlighted

Re: Is Splunk supported on Red Hat Enterprise Linux 7 running Linux kernel 3.10?

Splunk Employee
Splunk Employee

IF YOU HAVE RHEL7
ADD THE FOLLOWING "SLEEP 60" to your /etc/init.d/

#
Sleep 60
RETVAL=0

. /etc/init.d/functions

splunk_start() {
Highlighted

Re: Is Splunk supported on Red Hat Enterprise Linux 7 running Linux kernel 3.10?

Communicator

Could you please expand on why this is/was necessary? I realize this answer is quite old by now, but its always helpful to understand WHY something is recommended.

0 Karma
Highlighted

Re: Is Splunk supported on Red Hat Enterprise Linux 7 running Linux kernel 3.10?

Path Finder

Macy, could you elaborate on this, please?

0 Karma
Highlighted

Re: Is Splunk supported on Red Hat Enterprise Linux 7 running Linux kernel 3.10?

Contributor

Presumably the sleep delay allows PAM to be fully spun up so that ulimit settings are applied properly when Splunk starts. Another alternative and more details are discussed in George Starcher's blog post Splunk Ulimits and You.

0 Karma
Highlighted

Re: Is Splunk supported on Red Hat Enterprise Linux 7 running Linux kernel 3.10?

Communicator

Linux kernel 3.x and later (32-bit) was deprecated in 6.3 so you cannot upgrade to Splunk ver.6.3.x.

http://docs.splunk.com/Documentation/Splunk/6.3.0/Installation/Systemrequirements#Unix_operating_sys...

Note: Linux kernel 3.x and later (64-bit) should be supported in Splunk ver.6.3.x.