https://community.splunk.com/t5/Splunk-Enterprise/How-can-I-generate-apparmor-profile-for-my-Splunk-forwarder/m-p/596844#M12480 <P>Per this site (<A href="https://www.linuxtopia.org/online_books/opensuse_guides/apparmor_guide/apparmor_bx5bml8.html" target="_blank">https://www.linuxtopia.org/online_books/opensuse_guides/apparmor_guide/apparmor_bx5bml8.html</A>), aa-genprof is not suitable for long-running processes like the Splunk Universal Forwarder.&nbsp; Instead, follow the site's steps for systemic profiling.</P> Sun, 08 May 2022 13:30:12 GMT richgalloway 2022-05-08T13:30:12Z https://community.splunk.com/t5/Splunk-Enterprise/How-can-I-generate-apparmor-profile-for-my-Splunk-forwarder/m-p/596840#M12479 <P>I am trying to construct an apparmor profile for my Splunk forwarder agent. I have installed the agent and it is currently sending logs to my Splunk Enterprise server. But when I try to generate apparmor profiles using "aa-genprof" command, I do not see any actions in the output.</P> <P>&nbsp;</P> <P>How can I generate apparmor profile for my Splunk forwarder agent? I could not find any predefined profiles on the internet either.</P> Sun, 08 May 2022 19:49:26 GMT https://community.splunk.com/t5/Splunk-Enterprise/How-can-I-generate-apparmor-profile-for-my-Splunk-forwarder/m-p/596840#M12479 subramanianers 2022-05-08T19:49:26Z https://community.splunk.com/t5/Splunk-Enterprise/How-can-I-generate-apparmor-profile-for-my-Splunk-forwarder/m-p/596844#M12480 <P>Per this site (<A href="https://www.linuxtopia.org/online_books/opensuse_guides/apparmor_guide/apparmor_bx5bml8.html" target="_blank">https://www.linuxtopia.org/online_books/opensuse_guides/apparmor_guide/apparmor_bx5bml8.html</A>), aa-genprof is not suitable for long-running processes like the Splunk Universal Forwarder.&nbsp; Instead, follow the site's steps for systemic profiling.</P> Sun, 08 May 2022 13:30:12 GMT https://community.splunk.com/t5/Splunk-Enterprise/How-can-I-generate-apparmor-profile-for-my-Splunk-forwarder/m-p/596844#M12480 richgalloway 2022-05-08T13:30:12Z