We just loaded an AIX server with a forwarder and we're getting can't write file "/.splunk/authToken_#####_8089: Permission denied
We have loaded a number of servers with the splunkforwarder, but just started getting this message. We have a particular user to run the process and it has worked on other servers, but not these new ones. This is using Universal Forwarder 8.0.5. The process actually starts, but when you do ./splunk list monitor is when you get the can't write file. We have several more servers to load and would really like an assist here.
