Splunk Enterprise

Is there a Timeline when Splunk Enterprise and Universal Forwarder will ported to the new Apple Chips?

SierraX
Communicator

Hi,
since the ~20th of October 2020 Apple sells and deliver several Mac Machines (Mac Mini, MacBook Air and MacBook Pro) with Apple Silicon Chip M1.
Laptops are typically not a main target for things like Splunk Monitoring. But the Mac Mini could be an interesting device for Small Offices (e.g. as SH or HFw) and AdHoc analyses. 
At the moment Splunk is just downloadable for MacOS on Intel.
Is there a Timeline when Splunk Enterprise and Universal Forwarder will ported to the new Apple Chips?
Kind Regards
Dirk M.

xanthakita
Path Finder

I have since purchased a mac mini with the original M1 and Splunk runs beautifully on it (using Rosetta) there is no noticeable detriment to the operation. I am curious myself if there will ever be an ARM version compiled which would allow Splunk to run bare metal(silicon) on the M1 chip... 

Amusthofa
Explorer

Saw ideas for Splunk Enterprise & Universal Forwarder for M1 at ideas.splunk.com
Unfortunately, for now Splunk Enterprise on M1 is still being considered & Universal Forwarder on M1 still need more votes to even get into considerations.

0 Karma

isoutamo
SplunkTrust
SplunkTrust

Now there is Splunk Enterprise 10.2.0 beta available on voc.splunk.com. If you want to participate this beta program you need to go that site and apply to this beta. Beta license seems to be valid until November, so probably there are still lot of things which are not ready yet?

I just installed this on M3 max and at least it starts 😉

0 Karma

isoutamo
SplunkTrust
SplunkTrust
Haven't found that or even heard rumours about it. But lets hope that they will port it to m1 in some day....
I would like to test it with docker and k8s time by time and currently it needs intel based host.
0 Karma

isoutamo
SplunkTrust
SplunkTrust
Hi
You could run those with rosetta2 at least with M1 chip. I have tested it with several enterprise versions 8.x.x (not yet with UF).
r. Ismo

xanthakita
Path Finder

Amusthofa
Explorer

It works! Really glad we have Rosetta on M1. Now I can have personal Splunk lab env again.

Thanks.

bruzz
New Member

Not relevant to the OP's question (which is the reason I came here).

0 Karma
Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.

Can’t make it to .conf25? Join us online!

Get Updates on the Splunk Community!

Can’t Make It to Boston? Stream .conf25 and Learn with Haya Husain

Boston may be buzzing this September with Splunk University and .conf25, but you don’t have to pack a bag to ...

Splunk Lantern’s Guide to The Most Popular .conf25 Sessions

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

Unlock What’s Next: The Splunk Cloud Platform at .conf25

In just a few days, Boston will be buzzing as the Splunk team and thousands of community members come together ...