Splunk Enterprise

Has anyone tried to run Splunk Enterprise under Rosetta on the new Mac M1 chip?

xanthakita
Path Finder

Has anyone tried to run Splunk Enterprise under Rosetta on the new Mac M1 chip? I realize it’s compiled for intel, but supposedly Rosetta works pretty well at interpreting. I am considering purchasing a Mac mini but I want to be able to run Splunk on it for development and testing.

any insights or experience with this?

Labels (1)
0 Karma
1 Solution

xanthakita
Path Finder

isoutamo
SplunkTrust
SplunkTrust
As You have seen, it works great with M1 chips.
Have you try to run it with docker on M1?
r. Ismo
0 Karma

effem2
Path Finder

Splunk Docker container do not currently work. As Splunk Software(possibly WebServer) is running into a QEMU Bug.

qemu: uncaught target signal 11 (Segmentation fault) - core dumped

The container works but Splunk upon starting the Webserver will fail due to this issue.
As there is no ARM64 version of Splunk Enterprise, there is only one workaround, that is to install locally. 

0 Karma

xanthakita
Path Finder

Sadly I haven't come up to speed on Splunk in containers.. even though I really want to! I would think it would do fine since according to this: https://www.youtube.com/watch?v=wsg7wrTbBRk Docker is supported...

it would certainly be interesting to test.

 

xanthakita
Path Finder

discovered this youtube video:   https://www.youtube.com/watch?v=iYOXiwgt-3o

Get Updates on the Splunk Community!

Join Us for Splunk University and Get Your Bootcamp Game On!

If you know, you know! Splunk University is the vibe this summer so register today for bootcamps galore ...

.conf24 | Learning Tracks for Security, Observability, Platform, and Developers!

.conf24 is taking place at The Venetian in Las Vegas from June 11 - 14. Continue reading to learn about the ...

Announcing Scheduled Export GA for Dashboard Studio

We're excited to announce the general availability of Scheduled Export for Dashboard Studio. Starting in ...