I see that Splunk 9.0.4 might still have compatibility with Linux kernel 2.6 "linux-2.6". Despite Splunk's documentation indicating the deprecation of kernel 2.6 since Splunk Enterprise 8.2.9, the RPM package name ("splunk-9.0.4-de405f4a7979-linux-2.6-x86_64.rpm") for Splunk 9.0.4 suggests it is still built on and for this kernel version. Additionally, RHEL 6, which uses kernel 2.6, remains in extended support until June 30, 2024. This means Splunk 9.0.4 "can run" on kernel 2.6 under RHEL 6 which is still under extended supported. (wow!, 18 years of support for 2.6 kernel from RHEL) "https://download.splunk.com/products/splunk/releases/9.0.4/linux/splunk-9.0.4-de405f4a7979-linux-2.6-x86_64.rpm" The Splunk support page might not reflect this compatibility, so even though Splunk 9.0.4 package name might indicate that its built on linux kernel 2.6 and RHEL 6 is still under extended support, You might have a hard time making your case to your boss that this is a good idea, let alone to Splunk Support on this configuration. Cheers, Eddie ... View more