topic Re: Apps deployed on forwarders from deployment server has owner root in All Apps and Add-ons

Apps deployed on forwarders from deployment server has owner root

deovratdeshmukh — Wed, 22 Jul 2020 11:48:14 GMT

I have setup a deployment server which manages multiple forwarders. All my instances run with user splunk.

When I try to push apps from deployment server to forwarders the owner of the app reflects as "root" which should be splunk otherwise the app doesn't works.

It is very inconvenient to login to each forwarder and change the owner to splunk and restart the service again after the app is pushed.

Any solution for this?

Re: Apps deployed on forwarders from deployment server has owner root

richgalloway — Wed, 22 Jul 2020 13:07:24 GMT

Have you verified the ownership of $SPLUNK_HOME/etc/deployment-apps (on the deployment server) and everything within it?

Re: Apps deployed on forwarders from deployment server has owner root

deovratdeshmukh — Wed, 22 Jul 2020 13:14:45 GMT

Yes, everything in deployment-apps has owner as "splunk".

Re: Apps deployed on forwarders from deployment server has owner root

mhotsi — Thu, 26 Aug 2021 18:59:12 GMT

Make sure Splunk reboots as user Splunk not root.

Re: Apps deployed on forwarders from deployment server has owner root

Omar_hh77 — Mon, 05 Jun 2023 12:57:50 GMT

Hello, I've been facing the same issue

where you able to find the reason for this?

Re: Apps deployed on forwarders from deployment server has owner root

isoutamo — Mon, 05 Jun 2023 14:09:45 GMT

Are your DS and DCs all linux servers or have you Windows DS? If later then you must change your DS to linux.

r. Ismo