Installation

Unable to install splunk-4.3.1-119532-Linux-i686

shangshin
Builder

Hi,
I downloaded splunk-4.3.1-119532-Linux-i686.gz on line, extracted, and ran the command /splunk start. However, I got the error message below. I would appreciate if you can advise on how to make it work.

Thanks,
Shangshin

/apps/cores/splunk/bin/splunkd: error while loading shared libraries: libarchive.so.2: cannot open shared object file: No such file or directory
/apps/cores/splunk/bin/splunkd: error while loading shared libraries: libarchive.so.2: cannot open shared object file: No such file or directory

Splunk> The IT Search Engine.

Checking prerequisites...
Checking mgmt port [8089]: /apps/cores/splunk/bin/splunkd: error while loading shared libraries: libarchive.so.2: cannot open shared object file: No such file or directory
open
/apps/cores/splunk/bin/splunkd: error while loading shared libraries: libarchive.so.2: cannot open shared object file: No such file or directory
SSL certificate generation failed.

Tags (1)
0 Karma
1 Solution

Ayn
Legend

Did you really run splunk start and not splunkd start? You'd get those errors if you tried to run splunkd directly.

View solution in original post

0 Karma

Ayn
Legend

Did you really run splunk start and not splunkd start? You'd get those errors if you tried to run splunkd directly.

0 Karma

shangshin
Builder

problem solved. Thanks!

0 Karma

Ayn
Legend

You're using the wrong flags for tar. You should be running tar zxvf, not tar xvf, in order to have the file gunzipped.

shangshin
Builder

It turns out linux version only works for wget download. http download won't work.

On the other hand, I got the error message to untar the file on 32-bit linux.

Any advice? Thanks!

'http://www.splunk.com/index.php/download_track?file=4.3.1/splunk/linux/splunk-4.3.1-119532-Linux-i68...'

31740819 Apr 6 19:08 splunk-4.3.1-119532-Linux-i686.tgz

tar xvf splunk-4.3.1-119532-Linux-i686.tgz
tar: This does not look like a tar archive
tar: Skipping to next header
tar: Archive contains obsolescent base-64 headers
tar: Error exit delayed from previous errors

0 Karma

keasley
Loves-to-Learn Lots

Uploaded screenshot of ldd command run.

0 Karma
Get Updates on the Splunk Community!

Splunk + ThousandEyes: Correlate frontend, app, and network data to troubleshoot ...

 Are you tired of troubleshooting delays caused by siloed frontend, application, and network data? We've got a ...

Splunk Observability for AI

Don’t miss out on an exciting Tech Talk on Splunk Observability for AI!Discover how Splunk’s agentic AI ...

🔐 Trust at Every Hop: How mTLS in Splunk Enterprise 10.0 Makes Security Simpler

From Idea to Implementation: Why Splunk Built mTLS into Splunk Enterprise 10.0  mTLS wasn’t just a checkbox ...