All Apps and Add-ons

How do you run scripts from Splunk TA for Unix and Linux without sudo or root?

joshiro
Communicator

We need to run some scripts from the TA for Unix and Linux but some of them require privileges.
Since we arent running Splunk with sudo, each time the script runs returns privileges errors.

The scripts we are trying to run are: vmstat.sh and nfsiostat.sh
We tried configuring this scripts with suid so they run with owner root, but it is not working.

Is there anyway we can run this scripts without running Splunk with sudo?

Labels (2)
0 Karma

isoutamo
SplunkTrust
SplunkTrust

Hi

you could add these individual commands to sudoers file and allow user splunk to run those. No need to run splunkd as root for that.

r. Ismo

0 Karma

joshiro
Communicator

We thought about sudoers but you still need to invoke the scripts using sudo and we dont want to modify them or run splunkd with sudo.

The binaries that require privileges are dmesg and nfsiostat, we also thought that we can add the suid flag to run them as owner but we dont want to change permisions from the OS binaries.

We are still looking for alternatives.

0 Karma
Get Updates on the Splunk Community!

Splunk Observability Cloud’s AI Assistant in Action Series: Analyzing and ...

This is the second post in our Splunk Observability Cloud’s AI Assistant in Action series, in which we look at ...

Elevate Your Organization with Splunk’s Next Platform Evolution

 Thursday, July 10, 2025  |  11AM PDT / 2PM EDT Whether you're managing complex deployments or looking to ...

Splunk Answers Content Calendar, June Edition

Get ready for this week’s post dedicated to Splunk Dashboards! We're celebrating the power of community by ...