Re: [PLUG] Dancing about Architecture

If your intent is just to poke around the Splunk UI, and ingest some sample data, you can use a trial of Splunks Cloud version:

https://www.splunk.com/en_us/cloud.html

Andy

From: plug <plug-bounces@lists.phillylinux.org> on behalf of Ron Mansolino <rmsolino@gmail.com>
Reply-To: Philadelphia Linux User's Group Discussion List <plug@lists.phillylinux.org>
Date: Friday, April 20, 2018 at 3:58 PM
To: Philadelphia Linux User's Group Discussion List <plug@lists.phillylinux.org>
Subject: [PLUG] Dancing about Architecture

I had to jump through hoops to get a package to run that requires x64.

My VPS provider has an option to select a boot kernel; and everything else *seems* to work, but the splunk binary here can't find something it needs to start and I'm trying to evaluate how much hair I want to pull out trying to evaluate it. (I have a recruiter asking about splunk and all my experience is with ArcSight. SSDD, right?)

debian:/opt/splunk# uname -m
x86_64
debian:/opt/splunk# dpkg --print-architecture
i386
debian:/opt/splunk# arch
x86_64

As it happens, I can't stay on this kernel (netfilter isn't loading *some* of my iptables rules), so I don't want to do anything permanent before I revert back to my (newer) i386 kernel.

Any troubleshooting ideas? thanks ...

___________________________________________________________________________ Philadelphia Linux Users Group -- http://www.phillylinux.org Announcements - http://lists.phillylinux.org/mailman/listinfo/plug-announce General Discussion -- http://lists.phillylinux.org/mailman/listinfo/plug