After upgrading to Debian 13 Journald input is not working anymore with Splunk 10.x. This error I found in the internal logs: ERROR ExecProcessor [3095663 ExecProcessor] - message from "/opt/splunk/bin/splunkd journald-modinput '$@'" journalctl: /opt/splunk/lib/libcrypto.so.3: version `OPENSSL_3.4.0' not found (required by /usr/lib/x86_64-linux-gnu/systemd/libsystemd-shared-257.so) (With Debian 12 Journald input is working. And with Splunk 9.4.x Journald input is working with Debian 13)
... View more