I need to run splunk as non-root user as per security policy of the customer. The challenge I have faced is with Syslog-ng. if Syslog-ng runs as root, Splunk (running as non-root) cannot reald the logs collected sittign in var\log (owner is root) So the idea is to run syslog-ng as non-root user (let's say the user that is running splunk) which should allow splunk running with the same non-root user to read the syslog files. is this feasible? anyone has seen/done this before? thanks ... View more