×

Join the Conversation

Without signing in, you're just watching from the sidelines. Sign in or Register to connect, share, and be part of the Splunk Community.
Ask a Question
tmacdonagh
Engager
Member since: ‎09-29-2016
‎08-28-2020
Community Statistics
Posts 2
Solutions 0
Karma Given 2
Karma Received 1
Member Since ‎09-29-2016
Activity Feed
Topics I've Started
No posts to display.
View All

Re: auditd splunkd

by in Deployment Architecture
‎10-20-2016 02:23 PM
1 Karma
‎10-20-2016 02:23 PM
1 Karma
Removed my previous bad answer. The proper line to be entered into your audit.rules file is -a exit,never -F path=/opt/splunkforwarder/bin/splunkd -k splunk_exclude ... View more

Re: auditd splunkd

by in Deployment Architecture
‎09-29-2016 12:44 PM
‎09-29-2016 12:44 PM
splunk runs as root. ... View more
Contact Me
Online Status
Offline
Date Last Visited
‎08-28-2020 10:34 AM
Karma from
View All
Karma given to
View All