Splunk Enterprise

Unable to start Splunk universal forwarder on AIX Server

nabawi
Loves-to-Learn

Installing the universal forwarder version 8.1.2 using monitor user on AIX server 7.2 but unable to start splunk on this server due the following errors

monitor@fenix:/home/monitor/splunk/splunkforwarder/bin> ./splunk start
exec(): 0509-036 Cannot load program splunk because of the following errors:
0509-130 Symbol resolution failed for splunk because:
0509-136 Symbol ___strcmp64 (number 26) is not exported from
dependent module /usr/lib/libc.a[shr_64.o].
0509-136 Symbol ___strcpy64 (number 29) is not exported from
dependent module /usr/lib/libc.a[shr_64.o].
0509-136 Symbol __setjmp (number 32) is not exported from
dependent module /usr/lib/libc.a[shr_64.o].
0509-136 Symbol __get_lc_charmap_ptr (number 40) is not exported from
dependent module /usr/lib/libc.a[shr_64.o].
0509-136 Symbol cur_locale (number 210) is not exported from
dependent module /usr/lib/libc.a[shr_64.o].
0509-192 Examine .loader section symbols with the
'dump -Tv' command.

Tags (1)
0 Karma

joeloliveira
Observer

Hello

do you solve the problem? I'm triyng to to install to an AIX 6.1 the 8.1.3 forwarderagent and have the same problem:
$ cd /splunk/splunkforwarder/bin/
$ ./splunk start
exec(): 0509-036 Cannot load program splunk because of the following errors:
0509-130 Symbol resolution failed for splunk because:
0509-136 Symbol ___strcmp64 (number 26) is not exported from
dependent module /usr/lib/libc.a[shr_64.o].
0509-136 Symbol ___strcpy64 (number 29) is not exported from
dependent module /usr/lib/libc.a[shr_64.o].
0509-136 Symbol __setjmp (number 32) is not exported from
dependent module /usr/lib/libc.a[shr_64.o].
0509-136 Symbol __get_lc_charmap_ptr (number 40) is not exported from
dependent module /usr/lib/libc.a[shr_64.o].
0509-136 Symbol cur_locale (number 210) is not exported from
dependent module /usr/lib/libc.a[shr_64.o].
0509-192 Examine .loader section symbols with the
'dump -Tv' command.
$


0 Karma

nabawi
Loves-to-Learn

Hi aasabatini 

Thanks for suggestion, btw my splunk indexer server using 8.1.2 , if that the case can I user forwarder 8.1.3 to connect to my indexer 8.1.2?

Btw, my problem seems related with library on AIX it self, do we need to install the required AIX library because some how when I try to check path of library (/usr/lib ) the file library is exist there, but when I start splunk UF , error message library can't export from...... "Like my capture above" 

0 Karma

aasabatini
Motivator

Hi @nabawi 

Please let me know which Aix Version is running.

Also run:

ls -lrt /opt/splunkforawarder 

to check the owner of the path.

Another suggestion you can download the Uf Ver 8.1.3

hope can help

 

“The answer is out there, Neo, and it’s looking for you, and it will find you if you want it to.”
0 Karma
Get Updates on the Splunk Community!

Getting Started with AIOps: Event Correlation Basics and Alert Storm Detection in ...

Getting Started with AIOps:Event Correlation Basics and Alert Storm Detection in Splunk IT Service ...

Register to Attend BSides SPL 2022 - It's all Happening October 18!

Join like-minded individuals for technical sessions on everything Splunk!  This is a community-led and run ...

What's New in Splunk Cloud Platform 9.0.2208?!

Howdy!  We are happy to share the newest updates in Splunk Cloud Platform 9.0.2208! Analysts can benefit ...