Splunk SOAR

Error while preparing system for SOAR installation

souha
New Member

I was trying to install splunk soar on a CentOS 9 machine, but I'm getting this error:

Unable to read CentOS/RHEL version from /etc/redhat-release.

I think, it is due to the end of life of CentOS 7 and 8, and the provided  installation for splunk soar are supported on these versions only.

What should I do?

Labels (1)
Tags (2)
0 Karma

phanTom
SplunkTrust
SplunkTrust

@souha 

Splunk SOAR (On-premises) supports these operating systems and versions:

  • Red Hat Enterprise Linux 7.6 through 7.9
  • Red Hat Enterprise Linux 8.0 and any of the minor versions of 8.
    You can use the most recent minor release of RHEL 8 that is available at the time of the Splunk SOAR (On-premises) release.
  • Amazon Linux 2
  • Oracle Linux 8

If you are unable to use any of these then you should raise a support case to see if they can help. 

I think you could edit the install script to allow for another *nix OS but then you would be out of any support entitlement. 

0 Karma
Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

In December, the Splunk Threat Research Team had 1 release of new security content via the Enterprise Security ...

Why am I not seeing the finding in Splunk Enterprise Security Analyst Queue?

(This is the first of a series of 2 blogs). Splunk Enterprise Security is a fantastic tool that offers robust ...

Index This | What are the 12 Days of Splunk-mas?

December 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...