Getting Data In

FreeBSD 8.2 support?

wwwdrich
Explorer

Has anyone successfully installed splunk 4.2 on FreeBSD 8.x? I'm getting the following error output on FreeBSD 8.2 from the intel pkg:

> sudo pkg_add ~/splunk-4.2-96430-freebsd-6.1-intel.tgz 
pkg_add: could not find package /bin/uname !
tar: Unrecognized archive format
tar: +CONTENTS: Not found in archive
tar: Error exit delayed from previous errors.
pkg_add: tar extract of /bin/mv failed!
pkg_add: unable to extract table of contents file from '/bin/mv' - not a package?
pkg_add: autoload of dependency '/bin/mv' failed!

It is acting like the download isn't really a package file and has dependencies on non-standard FreeBSD file locations.

When I get some time I will rip the package apart and see what might be going wrong inside of it.

Tags (1)
0 Karma

bhieric
New Member

/libexec/ld-elf.so.1: Shared object "libutil.so.7" not found, required by "python"42
That was solved by simple ln -s /lib/libutil.so.8 /lib/libutil.so.7

Thanks! this solution worked for me as well!

0 Karma

shd
Explorer

I've encountered the same problem. Splunk package has some weird dependencies. Solution goes smth like this (assuming the only file in current directory is splunk package file):

tar zxf splunk-4.2-96430-freebsd-6.1-intel.tgz
rm splunk-4.2-96430-freebsd-6.1-intel.tgz
cat +CONTENTS | sed -e '/^@pkgdep/d' >CONTENTS.new
mv CONTENTS.new +CONTENTS
tar cf ../splunk-4.2-96430-freebsd-6.1-intel.tgz *

You will find new package file in .. directory. Also, when installing at FreeBSD 8.1 amd64, there was some problem with python shared object:

/libexec/ld-elf.so.1: Shared object "libutil.so.7" not found, required by "python"42

That was solved by simple ln -s /lib/libutil.so.8 /lib/libutil.so.7

0 Karma

dnelson
Engager

You never want to symlink shared libraries to different versions. The version number was bumped for a reason. Install the misc/compat7x port to get libutil.so.7.

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

[Puzzles] Solve, Learn, Repeat: Matching cron expressions

This puzzle (first published here) is based on matching timestamps to cron expressions.All the timestamps ...

Why Splunk Customers Should Attend Cisco Live 2026 Las Vegas

Why Splunk Customers Should Attend Cisco Live 2026 Las Vegas     Cisco Live 2026 is almost here, and this ...

Data Management Digest – May 2026

Welcome to the May 2026 edition of Data Management Digest!   As your trusted partner in data innovation, the ...