IBM Z and LinuxONE IBM Z

  • 1.  Splunk Forwarder and Indexer on IBM Z (zCX or Native Linux on z)

    Posted Sun March 12, 2023 04:27 AM

    Hello,

    I have an IBM Z  customer who is currently using IBM DLB with Splunk.
    The customer interesting in deploying Splunk Forwarder or Indexer on IBM Z (zCX or Native Linux on z).

    I tried searching Splunk site but the information there is not clear enough for me. 

    This lead me to two questions :

    1. Where we can find clear and detailed answer for this question ?
    2. Is anyone has experience with this and willing to share ?

    Thank you,

    Arye Shemer



    ------------------------------
    Arye Shemer
    ------------------------------


  • 2.  RE: Splunk Forwarder and Indexer on IBM Z (zCX or Native Linux on z)

    Posted Thu May 18, 2023 02:03 PM

    Splunk Forwarder is available for Linux on z.  We use it to send log messages to Splunk.



    ------------------------------
    Marcy Cortes
    ------------------------------



  • 3.  RE: Splunk Forwarder and Indexer on IBM Z (zCX or Native Linux on z)

    Posted Mon May 22, 2023 02:54 AM

    Adding to Marcy's statement

    Here you find the support statement for the Forwarder -- https://docs.splunk.com/Documentation/Splunk/9.0.4/Installation/Systemrequirements

    And here you can download the latest version https://www.splunk.com/en_us/download/universal-forwarder.html



    ------------------------------
    Stefan Schmitt
    STSM Enterprise Architect LinuxONE
    IBM
    ------------------------------



  • 4.  RE: Splunk Forwarder and Indexer on IBM Z (zCX or Native Linux on z)

    Posted Fri May 19, 2023 02:51 PM

    IBM has a list of zCX images (ICR; IBM Content Registry) here: https://ibm.github.io/ibm-z-oss-hub/containers/index.html

    But I don't see Splunk in the list.



    ------------------------------
    Bruce Marshall
    ------------------------------



  • 5.  RE: Splunk Forwarder and Indexer on IBM Z (zCX or Native Linux on z)

    Posted Mon May 22, 2023 03:41 AM

    Bruce,
    you can download Splunk from Docker hub: https://hub.docker.com/search?q=splunk&architecture=s390x
    Nick



    ------------------------------
    Nikolay Kultashev
    System Engineer
    Rocket Software
    ------------------------------