I am new to Splunk. I tried to install SA_Eventgen app. When I went to apps directory (/opt/slunk/etc/apps/SA_Eventgen/local), I get permission denied. Can anyone explained it to me please? I could not find the tutorial video for the eventgen app either, if someone know where can I find a tutorial session?
Thank a lot.
Appendix B: Eventgen troubleshooting tips:
http://dev.splunk.com/view/dev-guide/SP-CAAAE3E
Do you know why I am not allowed to access the local directory for that app?
Here are 2 resources to help you:
I use this one, it is straight forward and works with any TA that has eventgen files:
https://github.com/coccyx/eventgen
Recent find I am investigating:
https://github.com/splunk/eventgen