Getting Data In

Issues Starting Splunk Universal Forwarder: /opt/splunkforwarder/bin/splunkd: error while loading shared libraries: libpcre2-8.so

alucarddjin
Path Finder

I'm trying to install a forwarder on a NAS box but everytime I try to start it I get the error:
/opt/splunkforwarder/bin/splunkd: error while loading shared libraries: libpcre2-8.so

I've extracted it 3 times now and I get the same issue every time. I've set the owner and group to splunk:splunk and I can see that the libpcre2-8.so is in the lib folder but everytime I run the splunk start I get asked to run the set up then I enter admin as my username then it gives me this error. Please help as it's driving me potty!!

0 Karma

PavelP
Motivator

There could be several possible explanations, but I'll ask from other perspective - can you disable autostart of splunk, remove you splunk folder, reboot you NAS box (this is mandatory step) and install a deb/rpm package instead of tgz archive? Just try it!

0 Karma

alucarddjin
Path Finder

There isn't a deb/rpm package for my os (ARM). Also I've not even got Splunk started never mind know how to disable autostart haha.

0 Karma

PavelP
Motivator

Nevermind, you can still configure syslog to send log from your NAS box to splunk. It is even better because you can save a bunch of RAM

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Why Splunk Customers Should Attend Cisco Live 2026 Las Vegas

Why Splunk Customers Should Attend Cisco Live 2026 Las Vegas     Cisco Live 2026 is almost here, and this ...

What Is the Name of the USB Key Inserted by Bob Smith? (BOTS Hint, Not the Answer)

Hello Splunkers,   So you searched, “what is the name of the usb key inserted by bob smith?”  Not gonna lie… ...

Automating Threat Operations and Threat Hunting with Recorded Future

    Automating Threat Operations and Threat Hunting with Recorded Future June 29, 2026 | Register   Is your ...