Hello,
I have splunk starting up with systemd, and running as user splunk. I went to run the performance tasks on my indexers. Each of them failed. under triggered collectors, it reads the collector stack trace failed.
I logged into the system in question, and looked at the splunk_rapid_diag.log file.
tools_collector ERROR 139880958523200 - Error occurred for collector tcpdump while running `/usr/sbin/tcpdump -i any -w /tmp/tmpbkxib485/tcpdump_All_All.pcap`
Process finished with code=1
how do I run diagnostic tools without root access?
I expect this would affect any collectors using strace as well.
--jason