topic Re: Permissions issue Executable for Splunk App in Splunk Search

Permissions issue Executable for Splunk App

Roy_9 — Wed, 24 Apr 2024 01:21:39 GMT

Hi,

I am facing a executable permission issue for the few scripts for a splunk app and seeing these errors on various search heads, what is the best way to fix it? can someone help me with the script or a fix if you ever come across?

thanks in advance.

Re: Permissions issue Executable for Splunk App

gcusello — Wed, 24 Apr 2024 05:21:32 GMT

i @Roy_9 ,

you shared too few information to help you:

Which kind of scripts are you speaching ?
which OS are you using?
Have you a lustered or stand alone SH ?
Why do you want to execute these scripts on SH?

Ciao.

Giuseppe

Re: Permissions issue Executable for Splunk App

Roy_9 — Tue, 30 Apr 2024 13:36:58 GMT

Hi @gcusello

This is happening for splunk add-on for nix and OS is linux in a clustered SH. I checked the permissions are set to executible in the code repository but those are not getting replicated to search heads.

Re: Permissions issue Executable for Splunk App

gcusello — Tue, 30 Apr 2024 14:15:55 GMT

Hi @Roy_9 ,

when you speak of code repository, are you meaning the SHC-Deployer or what else?

check in the SHC-Deployer the grants and owners of all files and push again the app from the SHC-Deployer to the SH members.

Ciao.

Giuseppe

Re: Permissions issue Executable for Splunk App

Roy_9 — Tue, 30 Apr 2024 14:28:14 GMT

@gcusello We are using git repo for any code changes and i have validated that the permissions are set to executable on the deployers, do you want me to push these once again?

Re: Permissions issue Executable for Splunk App

gcusello — Tue, 30 Apr 2024 14:57:36 GMT

Hi @Roy_9,

check executable grants and check if the file owner (splunk I suppose) is the owner also of the splunkd process running on the server.

If the owner is root and the process runs as splunk there could be an issue.

Ciao.

Giuseppe