Per this site (https://www.linuxtopia.org/online_books/opensuse_guides/apparmor_guide/apparmor_bx5bml8.html), aa-genprof is not suitable for long-running processes like the Splunk Universal Forwarder.  Instead, follow the site's steps for systemic profiling. ... View more

Usualy the warnings get logged simply into splunkd.log. In case of scripted/modular inputs they can however have their own separate log files but typical splunk components log to splunkd.log. ... View more

Hi @subramanianers, Is your "splunkforwarder" full instance? transforms.conf and props.conf must be either on Heavy Forwarder or on Indexers. fields.conf must be on your Search Head. Please check if they are in correct places. ... View more

I am getting this error only when I try to configure input for any AWS resource using Generic S3 option ... View more