AWS EC2 instance types of 'a1' are using ARM8 processors (aarch64 in Linux). The only Splunk Universal Forwarder download I find for ARM is ARM6, but it appears not to work. Systemd gives the error of "... Failed at step EXEC spawning /opt/splunkforwarder/bin/splunk: Exec format error
-- Subject: Process /opt/splunkforwarder/bin/splunk could not be executed"
Is there a download that I missed?
Or is there an expected timeframe for this to be supported?
Thank you.
Please vote for Splunk ARMv8-64 UF here: https://ideas.splunk.com/ideas/APPSID-I-35
This may help for now:
I was able to get the ARMv6, 32-bit Splunk Universal Forwarder to work on a "Raspberry Pi 4" running Ubuntu (19.10 (Eoan Ermine)) using these steps:
Output from "uname -a": Linux ubuntu 5.3.0-1014-raspi2 #16-Ubuntu SMP Tue Nov 26 11:18:23 UTC 2019 aarch64 aarch64 aarch64 GNU/Linux
Running Splunk:
/opt/splunkforwarder/bin/splunk start
Splunk> Map. Reduce. Recycle.
Checking prerequisites...
Checking mgmt port [8089]: open
Checking conf files for problems...
Done
Checking default conf files for edits...
Validating installed files against hashes from '/opt/splunkforwarder/splunkforwarder-8.0.3-a6754d8441bf-Linux-arm-manifest'
All installed files intact.
Done
All preliminary checks passed.
Starting splunk server daemon (splunkd)...
Done