All Apps and Add-ons

How to run a specific script as root?

nick405060
Motivator

I'm looking to run a script as a root.

In terms of specifics, I'm trying to run pingstatus, and am only able to get it to run if I run all of Splunk as root. Which I don't want to do. If anyone has any recommendations specific to pingstatus, that works, but recommendations on how to run a specific script as root should fix the problem as well.

Tags (2)
0 Karma
1 Solution

nick405060
Motivator

You have to run Splunk as root.

View solution in original post

0 Karma

nick405060
Motivator

You have to run Splunk as root.

0 Karma

richgalloway
SplunkTrust
SplunkTrust

@nick405060 If your problem is resolved, please accept the answer to help future readers.

---
If this reply helps you, Karma would be appreciated.
0 Karma

laurie_gellatly
Communicator

Letting any non-root owned script run with root privileges - not a good idea from a security perspective (you're already running Splunk as non-root so this would be a backward step IMHO).
A lesser evil would be to allow /bin/ping to be run by a non-root user.
https://stackoverflow.com/questions/37512291/how-is-ping-for-non-root-user-implemented-on-linux-dist...
You'll then need to wrap that into a script to replace pingstatus.

...Laurie:{)

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Vibe-coding, AI, and Splunkcraft: Highlights from the .conf26 Builder Bar

If you stopped by the Builder Bar at .conf26, thank you! This year, we brought ...

Thanks for the Memories: .conf26 Took Learning to New Heights

Thank you, Splunk Community, for making .conf26 in Denver one for the books. From packed Splunk University ...

Best Practices: Splunk auto adjust pipeline queue

When you enable autoAdjustQueue in Splunk, maxSize should be understood as the queue size Splunk starts with ...