Knowledge Management

How do I resolve a share library libpcre.so reference after an upgrade on Ubuntu Lucid 64bit

Marinus
Communicator

I recently update my Ubuntu 64bit system and splunk refuses to start.

sudo apt-get dist-upgrade

uname -a *Linux 2.6.32-22-generic #36-Ubuntu SMP Thu Jun 3 19:31:57 UTC 2010 x86_64 GNU/Linux*

./splunk start just times out when it tries to start splunkd

./splunk version Splunk 4.1.2 (build 79191)

ldd ./splunkd

    < cut >
    librt.so.1 => /lib/librt.so.1 (0x00007fe305c9c000)
    **libpcre.so.0 => not found**
    libxml2.so.2 => /usr/lib/libxml2.so.2 (0x00007fe30594c000)
    libxslt.so.1 => /usr/lib/libxslt.so.1 (0x00007fe305710000)
    < cut >

The file exists file /home/splunk/splunk/lib/libpcre.so /home/splunk/splunk/lib/libpcre.so: symbolic link to `libpcre.so.0.0.1'

file /home/splunk/splunk/lib/libpcre.so.0.0.1 /home/splunk/splunk/lib/libpcre.so.0.0.1: ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, stripped

I saw a similar problem was noted at http://www.splunk.com/support/forum:SplunkAdministration/4082

0 Karma
1 Solution

Marinus
Communicator

I have upgraded the Splunk instance to 4.1.3 which has resolved the issue, however I'd still like to get to the bottom of the issue.

View solution in original post

0 Karma

Marinus
Communicator

I have upgraded the Splunk instance to 4.1.3 which has resolved the issue, however I'd still like to get to the bottom of the issue.

0 Karma
Get Updates on the Splunk Community!

Stay Connected: Your Guide to May Tech Talks, Office Hours, and Webinars!

Take a look below to explore our upcoming Community Office Hours, Tech Talks, and Webinars this month. This ...

They're back! Join the SplunkTrust and MVP at .conf24

With our highly anticipated annual conference, .conf, comes the fez-wearers you can trust! The SplunkTrust, as ...

Enterprise Security Content Update (ESCU) | New Releases

Last month, the Splunk Threat Research Team had two releases of new security content via the Enterprise ...