How to check which local system account splunk is using to run?

[summitsplunk]

How do I verify which account splunk is running as? I want to make sure it's running as splunk and not root.

[FrankVl · Accepted solution]

Log in to the command line and run a command like ps aux | grep Splunk which shows the user the Splunk process runs as at the start of the line.