Splunk Enterprise

Experiencing error when upgrading SP from 8.0.1 to 8.2.2.1

rballan2
Loves-to-Learn Lots

I am working to upgrade SPLUNK Version from 8.0.1 to 8.2.2.1 (Solaris 11.3 O.S.).

After the upgrade I see the below output, which is fine.

pkg info -l splunkforwarder
Name: application/splunkforwarder
Summary: Splunk Universal Forwarder
Description: Splunk> The platform for machine data.
Category: Applications/Internet
State: Installed
Publisher: splunk
Version: 8.2.2.1
Build Release: 191762265523787
Branch: None
Packaging Date: Wed Sep 15 09:07:09 2021
Last Install Time: Fri Mar 25 17:43:36 2022
Size: 58.43 MB
FMRI: pkg://splunk/application/splunkforwarder@8.2.2.1,191762265523787:20210915T090709Z

when I try to start splunk I see the below error:

 ./splunk start
ld.so.1: splunk: fatal: relocation error: file splunk: symbol in6addr_any: referenced symbol not found
Killed
 Please any suggestion on this specific error ?

 Thanks.

 RB

 

 

 

 

 

 

Labels (2)
0 Karma

jomasoftmarcel
New Member

This is a known Splunk issue: SPL-197140

Workaround:
1. Do not upgrade past Splunk 8.0.5 on Solaris 11.3
OR 2. Upgrade to Solaris 11.4

 

0 Karma

Stefanie
Builder

Unfortunately, Solaris hasn't been supported for Splunk Enterprise in some time now. 

Your options may be to downgrade back to the working version or try to find what it's unable to reference. There's a few posts on this forum with the same, if not, similar question as yours.

Or install a supported operating system . 

0 Karma
Get Updates on the Splunk Community!

What the End of Support for Splunk Add-on Builder Means for You

Hello Splunk Community! We want to share an important update regarding the future of the Splunk Add-on Builder ...

Solve, Learn, Repeat: New Puzzle Channel Now Live

Welcome to the Splunk Puzzle PlaygroundIf you are anything like me, you love to solve problems, and what ...

Building Reliable Asset and Identity Frameworks in Splunk ES

 Accurate asset and identity resolution is the backbone of security operations. Without it, alerts are ...