Getting Data In

FreeBSD 8.2 support?

wwwdrich
Explorer

Has anyone successfully installed splunk 4.2 on FreeBSD 8.x? I'm getting the following error output on FreeBSD 8.2 from the intel pkg:

> sudo pkg_add ~/splunk-4.2-96430-freebsd-6.1-intel.tgz 
pkg_add: could not find package /bin/uname !
tar: Unrecognized archive format
tar: +CONTENTS: Not found in archive
tar: Error exit delayed from previous errors.
pkg_add: tar extract of /bin/mv failed!
pkg_add: unable to extract table of contents file from '/bin/mv' - not a package?
pkg_add: autoload of dependency '/bin/mv' failed!

It is acting like the download isn't really a package file and has dependencies on non-standard FreeBSD file locations.

When I get some time I will rip the package apart and see what might be going wrong inside of it.

Tags (1)
0 Karma

bhieric
New Member

/libexec/ld-elf.so.1: Shared object "libutil.so.7" not found, required by "python"42
That was solved by simple ln -s /lib/libutil.so.8 /lib/libutil.so.7

Thanks! this solution worked for me as well!

0 Karma

shd
Explorer

I've encountered the same problem. Splunk package has some weird dependencies. Solution goes smth like this (assuming the only file in current directory is splunk package file):

tar zxf splunk-4.2-96430-freebsd-6.1-intel.tgz
rm splunk-4.2-96430-freebsd-6.1-intel.tgz
cat +CONTENTS | sed -e '/^@pkgdep/d' >CONTENTS.new
mv CONTENTS.new +CONTENTS
tar cf ../splunk-4.2-96430-freebsd-6.1-intel.tgz *

You will find new package file in .. directory. Also, when installing at FreeBSD 8.1 amd64, there was some problem with python shared object:

/libexec/ld-elf.so.1: Shared object "libutil.so.7" not found, required by "python"42

That was solved by simple ln -s /lib/libutil.so.8 /lib/libutil.so.7

0 Karma

dnelson
Engager

You never want to symlink shared libraries to different versions. The version number was bumped for a reason. Install the misc/compat7x port to get libutil.so.7.

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Build the Future of Agentic AI: Join the Splunk Agentic Ops Hackathon

AI is changing how teams investigate incidents, detect threats, automate workflows, and build intelligent ...

[Puzzles] Solve, Learn, Repeat: Character substitutions with Regular Expressions

This challenge was first posted on Slack #puzzles channelFor BORE at .conf23, we had a puzzle question which ...

Splunk Community Badges!

  Hey everyone! Ready to earn some serious bragging rights in the community? Along with our existing badges ...