Splunk Enterprise

Unable to start Splunk universal forwarder on AIX Server

nabawi
Loves-to-Learn

Installing the universal forwarder version 8.1.2 using monitor user on AIX server 7.2 but unable to start splunk on this server due the following errors

monitor@fenix:/home/monitor/splunk/splunkforwarder/bin> ./splunk start
exec(): 0509-036 Cannot load program splunk because of the following errors:
0509-130 Symbol resolution failed for splunk because:
0509-136 Symbol ___strcmp64 (number 26) is not exported from
dependent module /usr/lib/libc.a[shr_64.o].
0509-136 Symbol ___strcpy64 (number 29) is not exported from
dependent module /usr/lib/libc.a[shr_64.o].
0509-136 Symbol __setjmp (number 32) is not exported from
dependent module /usr/lib/libc.a[shr_64.o].
0509-136 Symbol __get_lc_charmap_ptr (number 40) is not exported from
dependent module /usr/lib/libc.a[shr_64.o].
0509-136 Symbol cur_locale (number 210) is not exported from
dependent module /usr/lib/libc.a[shr_64.o].
0509-192 Examine .loader section symbols with the
'dump -Tv' command.

Tags (1)
0 Karma

nabawi
Loves-to-Learn

Hi aasabatini 

Thanks for suggestion, btw my splunk indexer server using 8.1.2 , if that the case can I user forwarder 8.1.3 to connect to my indexer 8.1.2?

Btw, my problem seems related with library on AIX it self, do we need to install the required AIX library because some how when I try to check path of library (/usr/lib ) the file library is exist there, but when I start splunk UF , error message library can't export from...... "Like my capture above" 

0 Karma

aasabatini
Builder

Hi @nabawi 

Please let me know which Aix Version is running.

Also run:

ls -lrt /opt/splunkforawarder 

to check the owner of the path.

Another suggestion you can download the Uf Ver 8.1.3

hope can help

 

0 Karma
.conf21 CFS Extended through 5/20!

Don't miss your chance
to share your Splunk
wisdom in-person or
virtually at .conf21!

Call for Speakers has
been extended through
Thursday, 5/20!