M2 Mac mini に Splunk 9.1 を導入する

% tar -zxvf splunk-9.1.0.1-77f73c9edb85-darwin-64.tgz

% cd (install_path)/splunk/bin
% ./splunk start
zsh: bad CPU type in executable: ./splunk

% /usr/sbin/softwareupdate --install-rosetta --agree-to-licenseBy using the agreetolicense option, you are agreeing that you have run this tool with the license only option and have read and agreed to the terms.
If you do not agree, press CTRL-C and cancel this process immediately.
2023-07-22 12:40:49.686 softwareupdate[16770:88577] Package Authoring Error: 042-01896: Package reference com.apple.pkg.RosettaUpdateAuto is missing installKBytes attribute
Install of Rosetta 2 finished successfully

% ./splunk start
SPLUNK GENERAL TERMS

Last Updated: August 12, 2021

These Splunk General Terms ("General Terms") between Splunk Inc., a Delaware
corporation, with its principal place of business at 270 Brannan Street, San
Francisco, California 94107, U.S.A ("Splunk" or "we" or "us" or "our") and you
("Customer" or "you" or "your") apply to the purchase of licenses and
subscriptions for Splunk's Offerings. By clicking on the appropriate button,
or by downloading, installing, accessing or using the Offerings, you agree to
these General Terms. If you are entering into these General Terms on behalf of
Customer, you represent that you have the authority to bind Customer. If you
do not agree to these General Terms, or if you are not authorized to accept
the General Terms on behalf of the Customer, do not download, install, access,
or use any of the Offerings.

(以下略)

Do you agree with this license? [y/n]: y

This appears to be your first time running this version of Splunk.

Splunk software must create an administrator account during startup. Otherwise, you cannot log in.
Create credentials for the administrator account.
Characters do not appear on the screen when you type in credentials.

Please enter an administrator username: starplatinum
Password must contain at least:
   * 8 total printable ASCII character(s).
Please enter a new password: 
Please confirm new password: 
Copying '/Users/starplatinum/Downloads/splunk/etc/openldap/ldap.conf.default' to '/Users/starplatinum/Downloads/splunk/etc/openldap/ldap.conf'.
Generating RSA private key, 2048 bit long modulus
......+++++
....................+++++
e is 65537 (0x10001)
writing RSA key

Generating RSA private key, 2048 bit long modulus
............................................+++++
.+++++
e is 65537 (0x10001)
writing RSA key

Moving '/Users/starplatinum/Downloads/splunk/share/splunk/search_mrsparkle/modules.new' to '/Users/starplatinum/Downloads/splunk/share/splunk/search_mrsparkle/modules'.

Splunk> Like an F-18, bro.

Checking prerequisites...
	Checking http port [8000]: open
	Checking mgmt port [8089]: open
	Checking appserver port [127.0.0.1:8065]: open
	Checking kvstore port [8191]: open
	Checking configuration... Done.
		Creating: /Users/starplatinum/Downloads/splunk/var/lib/splunk
		Creating: /Users/starplatinum/Downloads/splunk/var/run/splunk
		Creating: /Users/starplatinum/Downloads/splunk/var/run/splunk/appserver/i18n
		Creating: /Users/starplatinum/Downloads/splunk/var/run/splunk/appserver/modules/static/css
		Creating: /Users/starplatinum/Downloads/splunk/var/run/splunk/upload
		Creating: /Users/starplatinum/Downloads/splunk/var/run/splunk/search_telemetry
		Creating: /Users/starplatinum/Downloads/splunk/var/run/splunk/search_log
		Creating: /Users/starplatinum/Downloads/splunk/var/spool/splunk
		Creating: /Users/starplatinum/Downloads/splunk/var/spool/dirmoncache
		Creating: /Users/starplatinum/Downloads/splunk/var/lib/splunk/authDb
		Creating: /Users/starplatinum/Downloads/splunk/var/lib/splunk/hashDb
New certs have been generated in '/Users/starplatinum/Downloads/splunk/etc/auth'.
	Checking critical directories...	Done
	Checking indexes...
		Validated: _audit _configtracker _internal _introspection _metrics _metrics_rollup _telemetry _thefishbucket history main summary
	Done
	Checking filesystem compatibility...  Done
	Checking conf files for problems...
	Done
	Checking default conf files for edits...
	Validating installed files against hashes from '/Users/starplatinum/Downloads/splunk/splunk-9.1.0.1-77f73c9edb85-darwin-64-manifest'
	All installed files intact.
	Done
All preliminary checks passed.

Starting splunk server daemon (splunkd)...  
Generating a RSA private key
................................................+++++
...............................................................................................................+++++
writing new private key to 'privKeySecure.pem'
-----
Signature ok
subject=/CN=M2-mini.local/O=SplunkUser
Getting CA Private Key
writing RSA key
PYTHONHTTPSVERIFY is set to 0 in splunk-launch.conf disabling certificate validation for the httplib and urllib libraries shipped with the embedded Python interpreter; must be set to "1" for increased security
Done


Waiting for web server at http://127.0.0.1:8000 to be available........................ Done


If you get stuck, we're here to help.  
Look for answers here: http://docs.splunk.com

The Splunk web interface is at http://M2-mini.local:8000