write_splunk.solaris.so plugin provided for Solaris is not of the correct architecture.

[jiriogbe]

write_splunk plugin from splunk app for infrastructure provided for solaris is not of the correct architecture.

collectd: /opt/csw/lib/collectd/write_splunk.so: wrong ELF data format: ELFDATA2LSB. The most common cause for this problem is missing dependencies. Use ldd(1) to check the dependencies of the plugin / shared object.

/export/pkgs/splunk/install/ufwinstall# ldd /opt/csw/lib/collectd/write_splunk.so
ldd: /opt/csw/lib/collectd/write_splunk.so: ELF machine type: EM_386: is incompatible with system
This write_splunk.so is copied over by Splunk's install_agent.sh:
SunOS)
$_sudo cp collectd.conf /etc/opt/csw/
$_sudo cp "/export/pkgs/splunk/install/ufwinstall/write_splunk-solaris.so" "/opt/csw/lib/collectd/write_splunk.so"

Using SunOS knpdb11 5.11 11.4.5.3.0 sun4v sparc sun4v

We believe that plugin is supported by Solaris under an x86_64 architecture, but not SPARC.

thinking of creating a build for SPARC. Below is the link
https://github.com/splunk/collectd-plugins

Note: Universal Forwarders: 8.03
Heavy Forwarders: 8.04
Indexer: 8.03

No upgrade have been performed. Heavy forwarders were implemented after the uf's and indexer, hence the newer version.

Would like to know if there is a sparc version of this plugin available.

[jweinst1]

I think the issue is EM_386 is for the i386 instruction set, not the sparc instruction set. The plugin needs to be rebuilt on the target machine