All Apps and Add-ons

Issues with Splunk_TA_nix permissions when using deployment server on Windows 2012 server

selim
Path Finder

Hello,

I setup the deployment server on Windows 2012 server along with Splunk indexer and installed the Unix app. I extracted the Splunk_TA_nix app under /deployment-apps and was able to deploy the application successfully to the corresponding Linux servers. The problem I have is with the Splunk_TA_nix/bin/*.sh scripts. They do not have the execute permission.

ls -l

-rw-r--r-- 1 selim staff 3608 Nov 29 08:08 common.sh

-rw-r--r-- 1 selim staff 3566 Nov 29 08:08 cpu.sh
...

When I change the permissions (chmod a+x *.sh), the application works fine. However, with many Linux servers, I need a way to either integrate this within deployment or find a way to push the right permissions from Windows. I'd appreciate any recommendation.

Thanks

lukejadamec
Super Champion

What I ended up doing was writing a script that I deployed manually to my unix boxes in the etc/apps/splunkforwarder/local/bin and configured it to run once at startup. The script sets the correct permissions on the deployed apps' scripts. I also ran into issues where files would require dos2unix after deployment to a unix box, so included dos2unix in the script.

0 Karma

lukejadamec
Super Champion

According to this doc you use -1 for the interval.

http://docs.splunk.com/Documentation/Splunk/6.0.1/Data/Setupcustominputs

0 Karma

selim
Path Finder

Thanks for the tip. How do you setup a script that runs only once at startup? What would be the value for "interval" parameter for the script input?

0 Karma
Get Updates on the Splunk Community!

Automatic Discovery Part 1: What is Automatic Discovery in Splunk Observability Cloud ...

If you’ve ever deployed a new database cluster, spun up a caching layer, or added a load balancer, you know it ...

Real-Time Fraud Detection: How Splunk Dashboards Protect Financial Institutions

Financial fraud isn't slowing down. If anything, it's getting more sophisticated. Account takeovers, credit ...

Splunk + ThousandEyes: Correlate frontend, app, and network data to troubleshoot ...

 Are you tired of troubleshooting delays caused by siloed frontend, application, and network data? We've got a ...