https://community.splunk.com/t5/Getting-Data-In/Restarting-Splunk-in-the-serverclass-conf/m-p/23865#M96594 <P>Splunk should restart with the user that you have it configured to run as when you did the install and enabled the boot start.</P> Fri, 08 Feb 2013 00:06:55 GMT jgedeon120 2013-02-08T00:06:55Z https://community.splunk.com/t5/Getting-Data-In/Restarting-Splunk-in-the-serverclass-conf/m-p/23864#M96593 <P>I have question on restarting a Splunk Forwarder when rolling out a new app. In the serverclass.conf file, I'm adding a new app to an existing forwarder. Elsewhere in the serverclass.conf, the forwarder belongs to a server class that contains the restartSplunkd = true statement. When Splunk restarts on the forwarder, what user will it start with? I would like it to restart with a user named splunk, since we have a non-root user running splunk. If I've enabled splunk to restart on boot with a non-root user, will it use that user to start splunk? Any help is greatly appreciated!</P> Thu, 07 Feb 2013 20:13:24 GMT https://community.splunk.com/t5/Getting-Data-In/Restarting-Splunk-in-the-serverclass-conf/m-p/23864#M96593 mocallaghan 2013-02-07T20:13:24Z https://community.splunk.com/t5/Getting-Data-In/Restarting-Splunk-in-the-serverclass-conf/m-p/23865#M96594 <P>Splunk should restart with the user that you have it configured to run as when you did the install and enabled the boot start.</P> Fri, 08 Feb 2013 00:06:55 GMT https://community.splunk.com/t5/Getting-Data-In/Restarting-Splunk-in-the-serverclass-conf/m-p/23865#M96594 jgedeon120 2013-02-08T00:06:55Z