Splunk Enterprise

Has anyone tried to run Splunk Enterprise under Rosetta on the new Mac M1 chip?

xanthakita
Path Finder

Has anyone tried to run Splunk Enterprise under Rosetta on the new Mac M1 chip? I realize it’s compiled for intel, but supposedly Rosetta works pretty well at interpreting. I am considering purchasing a Mac mini but I want to be able to run Splunk on it for development and testing.

any insights or experience with this?

0 Karma
1 Solution

xanthakita
Path Finder

isoutamo
SplunkTrust
SplunkTrust
As You have seen, it works great with M1 chips.
Have you try to run it with docker on M1?
r. Ismo
0 Karma

effem2
Path Finder

Splunk Docker container do not currently work. As Splunk Software(possibly WebServer) is running into a QEMU Bug.

qemu: uncaught target signal 11 (Segmentation fault) - core dumped

The container works but Splunk upon starting the Webserver will fail due to this issue.
As there is no ARM64 version of Splunk Enterprise, there is only one workaround, that is to install locally. 

0 Karma

xanthakita
Path Finder

Sadly I haven't come up to speed on Splunk in containers.. even though I really want to! I would think it would do fine since according to this: https://www.youtube.com/watch?v=wsg7wrTbBRk Docker is supported...

it would certainly be interesting to test.

 

xanthakita
Path Finder

discovered this youtube video:   https://www.youtube.com/watch?v=iYOXiwgt-3o

Get Updates on the Splunk Community!

Why You Can't Miss .conf25: Unleashing the Power of Agentic AI with Splunk & Cisco

The Defining Technology Movement of Our Lifetime The advent of agentic AI is arguably the defining technology ...

Deep Dive into Federated Analytics: Unlocking the Full Power of Your Security Data

In today’s complex digital landscape, security teams face increasing pressure to protect sprawling data across ...

Your summer travels continue with new course releases

Summer in the Northern hemisphere is in full swing, and is often a time to travel and explore. If your summer ...