raspberry pi installation- Why am I receiving this error?

[lironalter]

trying to forward logs from node process that runs on a raspberry pi model 3b

the error i get when i try ti run the splunk universal forwarder on my pi

running the file command on the splunk executable returns this result:

of course i downloaded the arm version of the universal forwarder.

any help will be much appreciated 

rpi specs:

os details:

[EnricoP]

You are probably using a 32bit raspberry pi os and trying to run the 64bit UF

last ARMv6 is 8.1.9 universal forwarder 

[__Sebastian]

which OS you are using to install the UF?

[codebuilder]

First thing I notice is that you aren't passing in any arguments. Simply running the splunk binary won't have any effect. If you're trying to start it up for the first time try using:

$SPLUNK_HOME/bin/splunk start

[lironalter]

Thanks for answering! 

Obviously it returns the same error since the error is that the file can't even be execute...

Here is an example:

[codebuilder]

Try adding execute permissions to the binary:

chmod +x $SPLUNK_HOME/bin/splunk

Also, who owns it? If it's owned by root be sure you are using sudo or log in as the root user.

sudo $SPLUNK_HOME/bin/splunk start

[lironalter]

Really appreciate your helping!

As I said before as I suspect the issue here is that the OS cannot execute the file at all.

Tried you suggestion and got the same error, the file permissions are:

-r-xr-xr-x

 so no issue there.

Any other ideas? thanks again!

[codebuilder]

Who owns the binary? It looks like you have it installed at /home/pi so you'll need to either run it as root or as the "pi" user. Any user other than root or "pi" won't be able to execute it.

[codebuilder]

You might also check the reply by @hsesterhenn_spl on this topic:

https://community.splunk.com/t5/Splunk-Enterprise/Splunk-on-ARM-Achitecture/m-p/512005