Quantcast
Channel: Questions in topic: "splunk-enterprise"
Viewing all articles
Browse latest Browse all 47296

Centos 7 - Splunk 7.4.2 - Enable/Disable boot start - issues as non-root user

$
0
0
We have setup "enable boot-start" as the non-root user "splunk" and it's not systemd managed:/opt/splunk/bin/splunk enable boot-start -user splunk -systemd-managed 0 --no-prompt --accept-license --answer-yes From what I have read, this changes the SPLUNK_OS_USER in splunk-launch.conf, as well as creates a new init.d script. However, according to [this document](https://docs.splunk.com/Documentation/Splunk/8.0.0/Admin/ConfigureSplunktostartatboottime#Enable_boot-start_as_a_non-root_user "This document"), you still need to edit the init.d script to run splunkd as a non-root user. I would have thought that specifying "-user splunk" would have been enough to ensure this happened. So can you please verify that, in order to properly run splunk as non-root user and for splunk to start at boot, you need to: 1. Enable boot-start as per the command above; 2. Edit the init.d script to ensure that the commands are being run as the appropriate non-root user. I ask this because this makes maintenance a bit more tricky. Say I want to disable boot-start. This deletes the init.d script apparently. Then when we run the enable boot-start command again, the file is re-created, without our edits. So we need to edit the file again. Failing to do so could cause issues when splunk is started on boot as root rather than the non-root user.

Viewing all articles
Browse latest Browse all 47296

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>