https://community.splunk.com/t5/Getting-Data-In/issues-with-scripted-inputs-and-secondary-groups/m-p/148832#M30288 <P>Customer has reported an issue with Splunk scripted inputs and setgroups. An very simple example would be I have a script $SPLUNK_HOME/bin/script called shaky.sh</P> <P>This just calls /tmp/test.sh which just contains "echo "hello world <CODE>date</CODE>" &gt;&gt; /tmp/test.out</P> <P># ls -l /tmp/test.out<BR /> -rwxr-x---. 1 root gumby 27 Jul 16 14:46 /tmp/test.sh</P> <P>splunkd runs as user "splunk" and gumby is a secondary group.</P> <P># id splunk<BR /> uid=500(splunk) gid=500(splunk) groups=500(splunk),502(gumby)</P> <P>The script does not run and there are lots of permission denied errors from the script in splunkd.log<BR /> If user splunk is changed to have gumby as a primary group, it works as expected<BR /> Is there away to get this working with a secondary group?</P> Fri, 18 Jul 2014 14:39:55 GMT dshakespeare_sp 2014-07-18T14:39:55Z https://community.splunk.com/t5/Getting-Data-In/issues-with-scripted-inputs-and-secondary-groups/m-p/148832#M30288 <P>Customer has reported an issue with Splunk scripted inputs and setgroups. An very simple example would be I have a script $SPLUNK_HOME/bin/script called shaky.sh</P> <P>This just calls /tmp/test.sh which just contains "echo "hello world <CODE>date</CODE>" &gt;&gt; /tmp/test.out</P> <P># ls -l /tmp/test.out<BR /> -rwxr-x---. 1 root gumby 27 Jul 16 14:46 /tmp/test.sh</P> <P>splunkd runs as user "splunk" and gumby is a secondary group.</P> <P># id splunk<BR /> uid=500(splunk) gid=500(splunk) groups=500(splunk),502(gumby)</P> <P>The script does not run and there are lots of permission denied errors from the script in splunkd.log<BR /> If user splunk is changed to have gumby as a primary group, it works as expected<BR /> Is there away to get this working with a secondary group?</P> Fri, 18 Jul 2014 14:39:55 GMT https://community.splunk.com/t5/Getting-Data-In/issues-with-scripted-inputs-and-secondary-groups/m-p/148832#M30288 dshakespeare_sp 2014-07-18T14:39:55Z https://community.splunk.com/t5/Getting-Data-In/issues-with-scripted-inputs-and-secondary-groups/m-p/148833#M30289 <P>A solution for this appears to be to use newgrp in a "here file" as a wrapper<BR /> eg</P> <P>#!/bin/bash <BR /> <BR /> newgrp gumby &lt;&lt; END <BR /><BR /> /tmp/shaky.sh <BR /><BR /> END</P> Fri, 18 Jul 2014 14:44:34 GMT https://community.splunk.com/t5/Getting-Data-In/issues-with-scripted-inputs-and-secondary-groups/m-p/148833#M30289 dshakespeare_sp 2014-07-18T14:44:34Z