Splunk on ARM Macs: status of KV store support?

[i0ntempest]

Hi all, 

I'm currently running arm64 version of Splunk on my M4 Mac mini, and I noticed KV store isn't available. Digging deeper it seems like mongo binaries are missing from the arm64 release but are present in the x86_64 release, and works just fine under Rosetta translation. Why is this and can I somehow add mongodb binaries back?

I can see from https://www.mongodb.com/docs/manual/administration/production-notes/ that mongodb does support arm64 (armv8.2+).

[livehybrid]

Hi @i0ntempest 

Splunk doesnt support Splunk Enterprise on the M-series macbooks (https://help.splunk.com/en/splunk-enterprise/get-started/install-and-upgrade/10.2/plan-your-splunk-e...), there is only support for UF's which do no have the kvstore built in. 

This could be for a number of reasons but unfortunately I dont think it would be as simple as copying in the binaries for mongodb for ARM. 

🌟 Did this answer help you? If so, please consider:

• Adding karma to show it was useful
• Marking it as the solution if it resolved your issue
• Commenting if you need any clarification

Your feedback encourages the volunteers in this community to continue contributing