NIX addon problem

[mkhanzadeh]

hello everyone

we have Splunk_TA_nix version 8.7.0 ,some of scripts dose not work properly such as lsof.sh,rlog.sh ,...

also sometimes after the times scripts dose not work properly and it's log was interupted. can anyone helps me? 

[gcusello]

Hi @mkhanzadeh,

one question: did you deployed this add-on using a Windows Deployment Server?

if yes, this is the issue, because Windows doesn'r manage execution permits on these scripts.

Then, if you manually run this scripts (using the same user that you're using to run Splunk) do they work?

Ciao.

Giuseppe

[mkhanzadeh]

hi @gcusello 

thanks for reply.

no, we deployed this add-on using a Linux Deployment Server and script permission in "bin directory" seems correct.

[gcusello]

Hi @mkhanzadeh,

do they fail every time or sometimes?

what happen if you manually run these script using the same user that you are using to run Splunk?

Ciao.

Giuseppe

[mkhanzadeh]

Hi  @gcusello 

in some case fails every time in some case fails sometimes.

 I manually run rlog script using the same user that i am using to run Splunk and it fails

[gcusello]

Hi @mkhanzadeh,

this should mean that the issue is in the user grants, did you used to run Splunk as root?

Ciao.

Giuseppe