I am working to upgrade SPLUNK Version from 8.0.1 to 8.2.2.1 (Solaris 11.3 O.S.).
After the upgrade I see the below output, which is fine.
pkg info -l splunkforwarder
Name: application/splunkforwarder
Summary: Splunk Universal Forwarder
Description: Splunk> The platform for machine data.
Category: Applications/Internet
State: Installed
Publisher: splunk
Version: 8.2.2.1
Build Release: 191762265523787
Branch: None
Packaging Date: Wed Sep 15 09:07:09 2021
Last Install Time: Fri Mar 25 17:43:36 2022
Size: 58.43 MB
FMRI: pkg://splunk/application/splunkforwarder@8.2.2.1,191762265523787:20210915T090709Z
when I try to start splunk I see the below error:
./splunk start
ld.so.1: splunk: fatal: relocation error: file splunk: symbol in6addr_any: referenced symbol not found
Killed
Please any suggestion on this specific error ?
Thanks.
RB
This is a known Splunk issue: SPL-197140
Workaround:
1. Do not upgrade past Splunk 8.0.5 on Solaris 11.3
OR 2. Upgrade to Solaris 11.4
Unfortunately, Solaris hasn't been supported for Splunk Enterprise in some time now.
Your options may be to downgrade back to the working version or try to find what it's unable to reference. There's a few posts on this forum with the same, if not, similar question as yours.
Or install a supported operating system .