Knowledge Management

How do I resolve a share library libpcre.so reference after an upgrade on Ubuntu Lucid 64bit

Marinus
Communicator

I recently update my Ubuntu 64bit system and splunk refuses to start.

sudo apt-get dist-upgrade

uname -a *Linux 2.6.32-22-generic #36-Ubuntu SMP Thu Jun 3 19:31:57 UTC 2010 x86_64 GNU/Linux*

./splunk start just times out when it tries to start splunkd

./splunk version Splunk 4.1.2 (build 79191)

ldd ./splunkd

    < cut >
    librt.so.1 => /lib/librt.so.1 (0x00007fe305c9c000)
    **libpcre.so.0 => not found**
    libxml2.so.2 => /usr/lib/libxml2.so.2 (0x00007fe30594c000)
    libxslt.so.1 => /usr/lib/libxslt.so.1 (0x00007fe305710000)
    < cut >

The file exists file /home/splunk/splunk/lib/libpcre.so /home/splunk/splunk/lib/libpcre.so: symbolic link to `libpcre.so.0.0.1'

file /home/splunk/splunk/lib/libpcre.so.0.0.1 /home/splunk/splunk/lib/libpcre.so.0.0.1: ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, stripped

I saw a similar problem was noted at http://www.splunk.com/support/forum:SplunkAdministration/4082

0 Karma
1 Solution

Marinus
Communicator

I have upgraded the Splunk instance to 4.1.3 which has resolved the issue, however I'd still like to get to the bottom of the issue.

View solution in original post

0 Karma

Marinus
Communicator

I have upgraded the Splunk instance to 4.1.3 which has resolved the issue, however I'd still like to get to the bottom of the issue.

0 Karma
Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

In December, the Splunk Threat Research Team had 1 release of new security content via the Enterprise Security ...

Why am I not seeing the finding in Splunk Enterprise Security Analyst Queue?

(This is the first of a series of 2 blogs). Splunk Enterprise Security is a fantastic tool that offers robust ...

Index This | What are the 12 Days of Splunk-mas?

December 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...