How can I generate apparmor profile for my Splunk forwarder agent?

[subramanianers]

I am trying to construct an apparmor profile for my Splunk forwarder agent. I have installed the agent and it is currently sending logs to my Splunk Enterprise server. But when I try to generate apparmor profiles using "aa-genprof" command, I do not see any actions in the output.

How can I generate apparmor profile for my Splunk forwarder agent? I could not find any predefined profiles on the internet either.

[richgalloway]

Per this site (https://www.linuxtopia.org/online_books/opensuse_guides/apparmor_guide/apparmor_bx5bml8.html), aa-genprof is not suitable for long-running processes like the Splunk Universal Forwarder.  Instead, follow the site's steps for systemic profiling.