All Apps and Add-ons

Apps deployed on forwarders from deployment server has owner root

deovratdeshmukh
Loves-to-Learn

I have setup a deployment server which manages multiple forwarders. All my instances run with user splunk.

When I try to push apps from deployment server to forwarders the owner of the app reflects as "root" which should be splunk otherwise the app doesn't works.

It is very inconvenient to login to each forwarder and change the owner to splunk and restart the service again after the app is pushed.

Any solution for this?

Labels (1)
Tags (1)
0 Karma

Omar_hh77
Observer

Hello, I've been facing the same issue

where you able to find the reason for this?

0 Karma

isoutamo
SplunkTrust
SplunkTrust

Hi

Are your DS and DCs all linux servers or have you Windows DS? If later then you must change your DS to linux.

r. Ismo

0 Karma

mhotsi
Explorer

Make sure Splunk reboots as user Splunk not root.

0 Karma

richgalloway
SplunkTrust
SplunkTrust

Have you verified the ownership of $SPLUNK_HOME/etc/deployment-apps (on the deployment server) and everything within it?

---
If this reply helps you, Karma would be appreciated.
0 Karma

deovratdeshmukh
Loves-to-Learn

Yes, everything in deployment-apps has owner as "splunk".

0 Karma
Get Updates on the Splunk Community!

Registration for Splunk University is Now Open!

Are you ready for an adventure in learning?   Brace yourselves because Splunk University is back, and it's ...

Splunkbase | Splunk Dashboard Examples App for SimpleXML End of Life

The Splunk Dashboard Examples App for SimpleXML will reach end of support on Dec 19, 2024, after which no new ...

Understanding Generative AI Techniques and Their Application in Cybersecurity

Watch On-Demand Artificial intelligence is the talk of the town nowadays, with industries of all kinds ...