https://community.splunk.com/t5/Getting-Data-In/How-can-I-change-the-user-as-which-the-Windows-universal/m-p/52914#M10205 <P>The information above can be found: <A href="http://docs.splunk.com/Documentation/Splunk/latest/Deploy/DeployaWindowsdfviathecommandline">http://docs.splunk.com/Documentation/Splunk/latest/Deploy/DeployaWindowsdfviathecommandline</A></P> Tue, 20 Sep 2011 11:11:27 GMT neklov 2011-09-20T11:11:27Z https://community.splunk.com/t5/Getting-Data-In/How-can-I-change-the-user-as-which-the-Windows-universal/m-p/52911#M10202 <P>I have installed the Windows universal forwarder to send local data only. Now I want to configure it to run as a different user so that I can use Windows Auth to query a database. Which configuration file should I modify to change the user and is there an example config stanza I could copy?</P> Wed, 03 Aug 2011 17:32:56 GMT https://community.splunk.com/t5/Getting-Data-In/How-can-I-change-the-user-as-which-the-Windows-universal/m-p/52911#M10202 afternoon 2011-08-03T17:32:56Z https://community.splunk.com/t5/Getting-Data-In/How-can-I-change-the-user-as-which-the-Windows-universal/m-p/52912#M10203 <P>actually on Windows UF you should only need to changes the splunkd service account in windows services.msc and the account should have those user rights assignments :</P> <P>Full control over Splunk's installation directory</P> <P>Read access to any flat files you want to index </P> <P>Permission to log on as a service</P> <P>Permission to log on as a batch job</P> <P>Permission to replace a process-level token</P> <P>Permission to act as part of the operating system</P> <P>Permission to bypass traverse checking </P> Wed, 03 Aug 2011 17:58:57 GMT https://community.splunk.com/t5/Getting-Data-In/How-can-I-change-the-user-as-which-the-Windows-universal/m-p/52912#M10203 MarioM 2011-08-03T17:58:57Z https://community.splunk.com/t5/Getting-Data-In/How-can-I-change-the-user-as-which-the-Windows-universal/m-p/52913#M10204 <P>Thanks! I didn't even think to just look in Services in Server Manager.</P> <P>This isn't documented anywhere as far as I could find. Splunk Team: Would be a good thing to add! <span class="lia-unicode-emoji" title=":slightly_smiling_face:">🙂</span></P> Wed, 03 Aug 2011 18:21:00 GMT https://community.splunk.com/t5/Getting-Data-In/How-can-I-change-the-user-as-which-the-Windows-universal/m-p/52913#M10204 afternoon 2011-08-03T18:21:00Z https://community.splunk.com/t5/Getting-Data-In/How-can-I-change-the-user-as-which-the-Windows-universal/m-p/52914#M10205 <P>The information above can be found: <A href="http://docs.splunk.com/Documentation/Splunk/latest/Deploy/DeployaWindowsdfviathecommandline">http://docs.splunk.com/Documentation/Splunk/latest/Deploy/DeployaWindowsdfviathecommandline</A></P> Tue, 20 Sep 2011 11:11:27 GMT https://community.splunk.com/t5/Getting-Data-In/How-can-I-change-the-user-as-which-the-Windows-universal/m-p/52914#M10205 neklov 2011-09-20T11:11:27Z