Splunk Enterprise

Unable to start Splunk universal forwarder on AIX Server

nabawi
Loves-to-Learn

Installing the universal forwarder version 8.1.2 using monitor user on AIX server 7.2 but unable to start splunk on this server due the following errors

monitor@fenix:/home/monitor/splunk/splunkforwarder/bin> ./splunk start
exec(): 0509-036 Cannot load program splunk because of the following errors:
0509-130 Symbol resolution failed for splunk because:
0509-136 Symbol ___strcmp64 (number 26) is not exported from
dependent module /usr/lib/libc.a[shr_64.o].
0509-136 Symbol ___strcpy64 (number 29) is not exported from
dependent module /usr/lib/libc.a[shr_64.o].
0509-136 Symbol __setjmp (number 32) is not exported from
dependent module /usr/lib/libc.a[shr_64.o].
0509-136 Symbol __get_lc_charmap_ptr (number 40) is not exported from
dependent module /usr/lib/libc.a[shr_64.o].
0509-136 Symbol cur_locale (number 210) is not exported from
dependent module /usr/lib/libc.a[shr_64.o].
0509-192 Examine .loader section symbols with the
'dump -Tv' command.

Tags (1)
0 Karma

joeloliveira
Observer

Hello

do you solve the problem? I'm triyng to to install to an AIX 6.1 the 8.1.3 forwarderagent and have the same problem:
$ cd /splunk/splunkforwarder/bin/
$ ./splunk start
exec(): 0509-036 Cannot load program splunk because of the following errors:
0509-130 Symbol resolution failed for splunk because:
0509-136 Symbol ___strcmp64 (number 26) is not exported from
dependent module /usr/lib/libc.a[shr_64.o].
0509-136 Symbol ___strcpy64 (number 29) is not exported from
dependent module /usr/lib/libc.a[shr_64.o].
0509-136 Symbol __setjmp (number 32) is not exported from
dependent module /usr/lib/libc.a[shr_64.o].
0509-136 Symbol __get_lc_charmap_ptr (number 40) is not exported from
dependent module /usr/lib/libc.a[shr_64.o].
0509-136 Symbol cur_locale (number 210) is not exported from
dependent module /usr/lib/libc.a[shr_64.o].
0509-192 Examine .loader section symbols with the
'dump -Tv' command.
$


0 Karma

nabawi
Loves-to-Learn

Hi aasabatini 

Thanks for suggestion, btw my splunk indexer server using 8.1.2 , if that the case can I user forwarder 8.1.3 to connect to my indexer 8.1.2?

Btw, my problem seems related with library on AIX it self, do we need to install the required AIX library because some how when I try to check path of library (/usr/lib ) the file library is exist there, but when I start splunk UF , error message library can't export from...... "Like my capture above" 

0 Karma

aasabatini
Motivator

Hi @nabawi 

Please let me know which Aix Version is running.

Also run:

ls -lrt /opt/splunkforawarder 

to check the owner of the path.

Another suggestion you can download the Uf Ver 8.1.3

hope can help

 

“The answer is out there, Neo, and it’s looking for you, and it will find you if you want it to.”
0 Karma
Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.
Get Updates on the Splunk Community!

Data Persistence in the OpenTelemetry Collector

This blog post is part of an ongoing series on OpenTelemetry. What happens if the OpenTelemetry collector ...

Introducing Splunk 10.0: Smarter, Faster, and More Powerful Than Ever

Now On Demand Whether you're managing complex deployments or looking to future-proof your data ...

Community Content Calendar, September edition

Welcome to another insightful post from our Community Content Calendar! We're thrilled to continue bringing ...