topic Re: Can dynatrace oneagent be installed with splunk client in Open Q&A

Can dynatrace oneagent be installed with splunk client

Karl_IL_Chin — Wed, 11 Aug 2021 09:12:06 GMT

Hi,

When I try to install OneAgent and splunk in the same machine, the splunck service is interrupted.

<timestamp> <servername> kernel: traps: splunkd[23658] trap invalid opcode ip:7f58e3a342fb sp:7ffd7c8dec80 error:0 in liboneagentproc.so[7f58e3a1f000+85000]
<timestamp> <servername> splunk: ERROR: pid 23658 terminated with signal 4 (core dumped)

What can be done to fix/workaround it?

Thank you in advance.

Best Regards,

Karl

Re: Can dynatrace oneagent be installed with splunk client

ryan_ott — Wed, 11 Aug 2021 12:36:00 GMT

This is strange - as I have certainly installed OneAgents on servers with Splunk without issue. I would recommend opening a Support Ticket to dive deeper into this issue: https://support.dynatrace.com

Re: Can dynatrace oneagent be installed with splunk client

larry_roberts — Thu, 12 Aug 2021 14:08:48 GMT

We currently use both on multiple hosts without issues. Curious, are you seeing this on a specific OS such as Windows or Linux or both?

Re: Can dynatrace oneagent be installed with splunk client

larry_roberts — Tue, 17 Aug 2021 16:33:28 GMT

Dynatrace ONE sent out a notification to customers today on what I think might be related to your issue.

Are you using Splunk v8.2?

Through our proactive monitoring and analysis of OneAgent triggered alerts, we found a potential incompatibility between Dynatrace and Splunk after upgrading to Splunk 8.2.
With this update, Splunk is taking advantage of the LD_PRELOAD capability in Unix systems to load shared libraries used for their application before other libraries are loaded. Splunk 8.2’s implementation of LD_PRELOAD causes conflicts with Dynatrace OneAgent’s use of similar functionality that may cause stability issues with Splunk. Note that Dynatrace OneAgent has been using this type of functionality for a number of years, following best practices and security standards to avoid potential conflicts and impacts with other monitoring solutions.

You can find more info on it here -

https://www.dynatrace.com/support/help/setup-and-configuration/dynatrace-oneagent/oneaget-troubleshooting/troubleshoot-oneagent-installation/#anchor_splunk