Getting Data In

FreeBSD 8.2 support?

wwwdrich
Explorer

Has anyone successfully installed splunk 4.2 on FreeBSD 8.x? I'm getting the following error output on FreeBSD 8.2 from the intel pkg:

> sudo pkg_add ~/splunk-4.2-96430-freebsd-6.1-intel.tgz 
pkg_add: could not find package /bin/uname !
tar: Unrecognized archive format
tar: +CONTENTS: Not found in archive
tar: Error exit delayed from previous errors.
pkg_add: tar extract of /bin/mv failed!
pkg_add: unable to extract table of contents file from '/bin/mv' - not a package?
pkg_add: autoload of dependency '/bin/mv' failed!

It is acting like the download isn't really a package file and has dependencies on non-standard FreeBSD file locations.

When I get some time I will rip the package apart and see what might be going wrong inside of it.

Tags (1)
0 Karma

bhieric
New Member

/libexec/ld-elf.so.1: Shared object "libutil.so.7" not found, required by "python"42
That was solved by simple ln -s /lib/libutil.so.8 /lib/libutil.so.7

Thanks! this solution worked for me as well!

0 Karma

shd
Explorer

I've encountered the same problem. Splunk package has some weird dependencies. Solution goes smth like this (assuming the only file in current directory is splunk package file):

tar zxf splunk-4.2-96430-freebsd-6.1-intel.tgz
rm splunk-4.2-96430-freebsd-6.1-intel.tgz
cat +CONTENTS | sed -e '/^@pkgdep/d' >CONTENTS.new
mv CONTENTS.new +CONTENTS
tar cf ../splunk-4.2-96430-freebsd-6.1-intel.tgz *

You will find new package file in .. directory. Also, when installing at FreeBSD 8.1 amd64, there was some problem with python shared object:

/libexec/ld-elf.so.1: Shared object "libutil.so.7" not found, required by "python"42

That was solved by simple ln -s /lib/libutil.so.8 /lib/libutil.so.7

0 Karma

dnelson
Engager

You never want to symlink shared libraries to different versions. The version number was bumped for a reason. Install the misc/compat7x port to get libutil.so.7.

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Introducing ITSI 5.0: Unified Visibility and Actionable Insights

Introducing ITSI 5.0: Unified Visibility and Actionable Insights Tuesday, July 21, 2026  |  10:00AM PT / ...

Inside Splunk Agent Observability: Understanding Agent Behavior, Tokens & Costs

Inside Splunk Agent Observability:Understanding Agent Behavior, Tokens & Costs Thursday, August 06, ...

From Data to Insight: Announcing the Winners of the Splunk Dashboard Contest

Hi Splunkers, First off, thank you to everyone who participated in our very first From Data to Insight: The ...