Installation

Unable to install splunk-4.3.1-119532-Linux-i686

shangshin
Builder

Hi,
I downloaded splunk-4.3.1-119532-Linux-i686.gz on line, extracted, and ran the command /splunk start. However, I got the error message below. I would appreciate if you can advise on how to make it work.

Thanks,
Shangshin

/apps/cores/splunk/bin/splunkd: error while loading shared libraries: libarchive.so.2: cannot open shared object file: No such file or directory
/apps/cores/splunk/bin/splunkd: error while loading shared libraries: libarchive.so.2: cannot open shared object file: No such file or directory

Splunk> The IT Search Engine.

Checking prerequisites...
Checking mgmt port [8089]: /apps/cores/splunk/bin/splunkd: error while loading shared libraries: libarchive.so.2: cannot open shared object file: No such file or directory
open
/apps/cores/splunk/bin/splunkd: error while loading shared libraries: libarchive.so.2: cannot open shared object file: No such file or directory
SSL certificate generation failed.

Tags (1)
0 Karma
1 Solution

Ayn
Legend

Did you really run splunk start and not splunkd start? You'd get those errors if you tried to run splunkd directly.

View solution in original post

0 Karma

Ayn
Legend

Did you really run splunk start and not splunkd start? You'd get those errors if you tried to run splunkd directly.

0 Karma

shangshin
Builder

problem solved. Thanks!

0 Karma

Ayn
Legend

You're using the wrong flags for tar. You should be running tar zxvf, not tar xvf, in order to have the file gunzipped.

shangshin
Builder

It turns out linux version only works for wget download. http download won't work.

On the other hand, I got the error message to untar the file on 32-bit linux.

Any advice? Thanks!

'http://www.splunk.com/index.php/download_track?file=4.3.1/splunk/linux/splunk-4.3.1-119532-Linux-i68...'

31740819 Apr 6 19:08 splunk-4.3.1-119532-Linux-i686.tgz

tar xvf splunk-4.3.1-119532-Linux-i686.tgz
tar: This does not look like a tar archive
tar: Skipping to next header
tar: Archive contains obsolescent base-64 headers
tar: Error exit delayed from previous errors

0 Karma
Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

In December, the Splunk Threat Research Team had 1 release of new security content via the Enterprise Security ...

Why am I not seeing the finding in Splunk Enterprise Security Analyst Queue?

(This is the first of a series of 2 blogs). Splunk Enterprise Security is a fantastic tool that offers robust ...

Index This | What are the 12 Days of Splunk-mas?

December 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...