Hi guys, I have a scenario where I have three accounts: splunk, perf, and a user ID (belonging to person using Splunk). On the Splunk server (say 1), the user ID and the other two will be there. Is it possible for the user to access the splunk ID from the Splunk server under the user ID, e.g. su splunk, and run/submit any commands or scripts under splunk ID on any server or whatever? What I am getting at here is that I want to remove the user ID from all the servers that have Splunk installed and only have the user ID on the Splunk server itself. Is this doable? Is there a reason why a user will need a user ID on the servers (where it does not belong) where Splunk installed to run commands and create scripts? Is there a reason why scripts have to be created for Splunk (scripts that will run under perf only? And if so, for what reasons? I would think Splunk can just have the nmon files copied over, and whatever commands the user uses can be run under a script as well and the output also sent to Splunk. There should not have to be a user presence in all the non-Splunk servers. Any info here will be greatly appreciated. Thanks in advance! If I can remove both perf and the user ID, that will be great. I want to know, if Splunk ID is not enough on the non-Splunk servers, what are the real benefits behind Splunk if it cannot function without user intervention to improve the process or send more data to Splunk? ... View more