Splunk Enterprise

Unable to start Splunk universal forwarder on AIX Server

nabawi
Loves-to-Learn

Installing the universal forwarder version 8.1.2 using monitor user on AIX server 7.2 but unable to start splunk on this server due the following errors

monitor@fenix:/home/monitor/splunk/splunkforwarder/bin> ./splunk start
exec(): 0509-036 Cannot load program splunk because of the following errors:
0509-130 Symbol resolution failed for splunk because:
0509-136 Symbol ___strcmp64 (number 26) is not exported from
dependent module /usr/lib/libc.a[shr_64.o].
0509-136 Symbol ___strcpy64 (number 29) is not exported from
dependent module /usr/lib/libc.a[shr_64.o].
0509-136 Symbol __setjmp (number 32) is not exported from
dependent module /usr/lib/libc.a[shr_64.o].
0509-136 Symbol __get_lc_charmap_ptr (number 40) is not exported from
dependent module /usr/lib/libc.a[shr_64.o].
0509-136 Symbol cur_locale (number 210) is not exported from
dependent module /usr/lib/libc.a[shr_64.o].
0509-192 Examine .loader section symbols with the
'dump -Tv' command.

Tags (1)
0 Karma

joeloliveira
Observer

Hello

do you solve the problem? I'm triyng to to install to an AIX 6.1 the 8.1.3 forwarderagent and have the same problem:
$ cd /splunk/splunkforwarder/bin/
$ ./splunk start
exec(): 0509-036 Cannot load program splunk because of the following errors:
0509-130 Symbol resolution failed for splunk because:
0509-136 Symbol ___strcmp64 (number 26) is not exported from
dependent module /usr/lib/libc.a[shr_64.o].
0509-136 Symbol ___strcpy64 (number 29) is not exported from
dependent module /usr/lib/libc.a[shr_64.o].
0509-136 Symbol __setjmp (number 32) is not exported from
dependent module /usr/lib/libc.a[shr_64.o].
0509-136 Symbol __get_lc_charmap_ptr (number 40) is not exported from
dependent module /usr/lib/libc.a[shr_64.o].
0509-136 Symbol cur_locale (number 210) is not exported from
dependent module /usr/lib/libc.a[shr_64.o].
0509-192 Examine .loader section symbols with the
'dump -Tv' command.
$


0 Karma

nabawi
Loves-to-Learn

Hi aasabatini 

Thanks for suggestion, btw my splunk indexer server using 8.1.2 , if that the case can I user forwarder 8.1.3 to connect to my indexer 8.1.2?

Btw, my problem seems related with library on AIX it self, do we need to install the required AIX library because some how when I try to check path of library (/usr/lib ) the file library is exist there, but when I start splunk UF , error message library can't export from...... "Like my capture above" 

0 Karma

aasabatini
Motivator

Hi @nabawi 

Please let me know which Aix Version is running.

Also run:

ls -lrt /opt/splunkforawarder 

to check the owner of the path.

Another suggestion you can download the Uf Ver 8.1.3

hope can help

 

“The answer is out there, Neo, and it’s looking for you, and it will find you if you want it to.”
0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Why Splunk Customers Should Attend Cisco Live 2026 Las Vegas

Why Splunk Customers Should Attend Cisco Live 2026 Las Vegas     Cisco Live 2026 is almost here, and this ...

What Is the Name of the USB Key Inserted by Bob Smith? (BOTS Hint, Not the Answer)

Hello Splunkers,   So you searched, “what is the name of the usb key inserted by bob smith?”  Not gonna lie… ...

Automating Threat Operations and Threat Hunting with Recorded Future

    Automating Threat Operations and Threat Hunting with Recorded Future June 29, 2026 | Register   Is your ...