System requirements

Splunk Enterprise supports workload management on Linux operating systems only.

Linux kernel

Splunk Enterprise version 9.0 and higher requires Linux kernel version 3.x or higher. For more information on supported Linux kernel versions for Splunk Enterprise, see Supported operating systems in the Installation Manual.

Supported Linux distributions

Splunk Enterprise version 9.3 and higher supports workload management on these Linux distributions:

• RHEL 8 and 9
• CentOS 8
• Ubuntu 16.04 LTS and higher
• SUSE 12 and 15

Supported cgroups version

Before you can configure workload management in Splunk Enterprise, you must set up the underlying Linux operating system to allow splunkd to manage cgroups.

• Workload management supports Linux cgroups v1 by default.
• Workload management supports Linux cgroups v2 in Splunk Enterprise 9.3 for Early Access customers only.

Many Linux systems now have cgroups v2 enabled by default. If this is the case, you must revert your system to cgroups v1 to use workload management in Splunk Enterprise 9.3. Or use the cgroups v2 Early Access.

In the Early Access release stage, Splunk products may have limitations on customer access, features, maturity and regional availability. For additional information on Early Access please contact your Splunk representative.

For more information, see Set up Linux for workload management.

Systemd version

Workload management requires systemd version 219 or higher.

Systemd is not a mandatory requirement, but if systemd is running on your Linux instance, it must be version 219 or higher.