- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content


Hi @rayar,
are you speking about Splunk Enterprise or Universal Forwarder?
Anyway, Red Hat 7.9 has a kernel 3.10 and Splunk Enterprise 8.2.5 and 8.2.6 are certified for kernels 3.x+.
Universal Forwarders 8.2.5 and 8.2.6 are certified for kernels 3.x+ but only at 64 bits.
As you can see at the download page of Splunk or at https://docs.splunk.com/Documentation/Splunk/8.2.6/Installation/Systemrequirements.
Ciao.
Giuseppe
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content


Hi @rayar,
are you speking about Splunk Enterprise or Universal Forwarder?
Anyway, Red Hat 7.9 has a kernel 3.10 and Splunk Enterprise 8.2.5 and 8.2.6 are certified for kernels 3.x+.
Universal Forwarders 8.2.5 and 8.2.6 are certified for kernels 3.x+ but only at 64 bits.
As you can see at the download page of Splunk or at https://docs.splunk.com/Documentation/Splunk/8.2.6/Installation/Systemrequirements.
Ciao.
Giuseppe
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
I'm speaking about the Splunk Enterprise. Via that site: System requirements for use of Splunk Enterprise on-premises - Splunk Documentation, it looks like all versions of SPlunk (up to 9.1.2) will work on Linux 3.x and 4.x kernels.
My concern about the 8.2.x is that SPlunk clearly says this is no longer supported since 9/30/23.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content

>>>it looks like all versions of SPlunk (up to 9.1.2) will work on Linux 3.x and 4.x kernels.
Yes, right. in fact, 5x also good (All Linux x86 (64-bit) 3x, 4x and 5x are good with Splunk 9.1.2)
>>>My concern about the 8.2.x is that SPlunk clearly says this is no longer supported since 9/30/23.x
Yes, you are right.
Splunk Enterprise version 8.2.x is no longer supported as of September 30, 2023.
To have Splunk support and to avoid the security issues on older versions, the Splunk Customers should upgrade from 8.2.x to 9.x.x.
hope you understand the issue better now, thanks.
Sekar
PS - If this or any post helped you in any way, pls consider upvoting, thanks for reading !
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content


Hi @rayar,
good for you, see next time!
Ciao and happy splunking
Giuseppe
P.S.: Karma Points are appreciated 😉
