Splunk Enterprise

Unable to start Splunk universal forwarder on AIX Server

nabawi
Loves-to-Learn

Installing the universal forwarder version 8.1.2 using monitor user on AIX server 7.2 but unable to start splunk on this server due the following errors

monitor@fenix:/home/monitor/splunk/splunkforwarder/bin> ./splunk start
exec(): 0509-036 Cannot load program splunk because of the following errors:
0509-130 Symbol resolution failed for splunk because:
0509-136 Symbol ___strcmp64 (number 26) is not exported from
dependent module /usr/lib/libc.a[shr_64.o].
0509-136 Symbol ___strcpy64 (number 29) is not exported from
dependent module /usr/lib/libc.a[shr_64.o].
0509-136 Symbol __setjmp (number 32) is not exported from
dependent module /usr/lib/libc.a[shr_64.o].
0509-136 Symbol __get_lc_charmap_ptr (number 40) is not exported from
dependent module /usr/lib/libc.a[shr_64.o].
0509-136 Symbol cur_locale (number 210) is not exported from
dependent module /usr/lib/libc.a[shr_64.o].
0509-192 Examine .loader section symbols with the
'dump -Tv' command.

Tags (1)
0 Karma

joeloliveira
Observer

Hello

do you solve the problem? I'm triyng to to install to an AIX 6.1 the 8.1.3 forwarderagent and have the same problem:
$ cd /splunk/splunkforwarder/bin/
$ ./splunk start
exec(): 0509-036 Cannot load program splunk because of the following errors:
0509-130 Symbol resolution failed for splunk because:
0509-136 Symbol ___strcmp64 (number 26) is not exported from
dependent module /usr/lib/libc.a[shr_64.o].
0509-136 Symbol ___strcpy64 (number 29) is not exported from
dependent module /usr/lib/libc.a[shr_64.o].
0509-136 Symbol __setjmp (number 32) is not exported from
dependent module /usr/lib/libc.a[shr_64.o].
0509-136 Symbol __get_lc_charmap_ptr (number 40) is not exported from
dependent module /usr/lib/libc.a[shr_64.o].
0509-136 Symbol cur_locale (number 210) is not exported from
dependent module /usr/lib/libc.a[shr_64.o].
0509-192 Examine .loader section symbols with the
'dump -Tv' command.
$


0 Karma

nabawi
Loves-to-Learn

Hi aasabatini 

Thanks for suggestion, btw my splunk indexer server using 8.1.2 , if that the case can I user forwarder 8.1.3 to connect to my indexer 8.1.2?

Btw, my problem seems related with library on AIX it self, do we need to install the required AIX library because some how when I try to check path of library (/usr/lib ) the file library is exist there, but when I start splunk UF , error message library can't export from...... "Like my capture above" 

0 Karma

aasabatini
Motivator

Hi @nabawi 

Please let me know which Aix Version is running.

Also run:

ls -lrt /opt/splunkforawarder 

to check the owner of the path.

Another suggestion you can download the Uf Ver 8.1.3

hope can help

 

“The answer is out there, Neo, and it’s looking for you, and it will find you if you want it to.”
0 Karma
Get Updates on the Splunk Community!

Splunk Community Platform Survey

Hey Splunk Community, Starting today, the community platform may prompt you to participate in a survey. The ...

Observability Highlights | November 2022 Newsletter

 November 2022Observability CloudEnd Of Support Extension for SignalFx Smart AgentSplunk is extending the End ...

Avoid Certificate Expiry Issues in Splunk Enterprise with Certificate Assist

This blog post is part 2 of 4 of a series on Splunk Assist. Click the links below to see the other ...