Getting Data In

Splunk Universal Forwarder On AIX Fails To Start After Upgrade To 8.0.2

jerjer951109
Loves-to-Learn

Dear all,

I upgraded universal forwarder from 7.2.0 to 8.0.2 on AIX.

When i start it, i have encountered the below problem:

AIX_upgrade_failed.PNG

 

I have tried to run slibclean and re run upgrade again. but it still failed.

 

 also, i have try to run 'splunk validate files' .

AIX_upgrade_failed2.PNG

Labels (1)
0 Karma

richgalloway
SplunkTrust
SplunkTrust

Do you have the AIX Toolbox for Linux Applications installed?  See https://docs.splunk.com/Documentation/Forwarder/8.0.6/Forwarder/Installanixuniversalforwarder#Instal...

I believe the slibclean utility modified some Splunk binaries so now they fail the integrity check.  Re-install Splunk to correct that.

---
If this reply helps you, Karma would be appreciated.
0 Karma

jerjer951109
Loves-to-Learn

for slibclean , i have try to do it and reinstall splunk but it still failed.

for AIX toolbox, as i can upgrade from 6.3.1 to 7.0.0  and then upgrade 7.0.0 to 7.2.0. but i cannot upgrade to 7.2.0 to 8.0.2.

0 Karma
Get Updates on the Splunk Community!

Splunk Search APIを使えば調査過程が残せます

   このゲストブログは、JCOM株式会社の情報セキュリティ本部・専任部長である渡辺慎太郎氏によって執筆されました。 Note: This article is published in both Japanese ...

Integrating Splunk Search API and Quarto to Create Reproducible Investigation ...

 Splunk is More Than Just the Web Console For Digital Forensics and Incident Response (DFIR) practitioners, ...

Congratulations to the 2025-2026 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...