I have installed an app on the forwarder with scripted input. It's throwing an error while starting Splunk using 'Splunk' user 11/9/20
9:13:20.631 PM
11-09-2020 21:13:20.631 +0000 ERROR ExecProcessor - message from "/opt/splunkforwarder/etc/apps/AWSMData/bin/awsmeta.sh" /bin/sh: /opt/splunkforwarder/etc/apps/AWSMetaData/bin/awsmetarun.sh: Permission denied
host = host.ip.internalindex = _internalsource = /opt/splunkforwarder/var/log/splunk/splunkd.logsourcetype = splunkd
11/9/20 I tried to set the permission to this script located under SPLUNK_HOME/etc/apps/<appname>/bin/<script> But whenever i restart Splunk daemon, the permission revokes
... View more