As I mentioned, I already have the sslcertificate.pem file and have followed the steps outlined in the section 'Install and configure certificates on the Splunk Enterprise management port", but not working.    ... View more

Selinux alerts is disabled and not getting on second point.  But when i comment #NoNewPrivileges=Yes line from file /etc/systemd/system/SplunkForwarder.service. It will work. But not sure why Splunk service privilege is stoping this.  ... View more

Yes, script is woking with "splunk cmd" also splunk cmd ./crio_simple_ps.sh ... View more

Yes, am getting output for below commands, sudo /usr/bin/crictl ps -a splunk cmd sudo /usr/bin/crictl ps -a   ... View more

Yes, my script is working with sudo only below script for reference #!/bin/bash # Set the working directory to the script's directory cd "$(dirname "$0")" || exit 1 # Full paths for commands CRICTL_PATH="/usr/bin/crictl"  # Adjust the path if necessary # Get container list container_list=$(sudo "$CRICTL_PATH" ps -a) echo "$container_list" | sed '1s/POD ID/POD_ID/g' IFS=$'\n' for container_info in $(echo "$container_list" | tail -n +2); do container_id=$(echo "$container_info" | awk '{print $1}')  container_name=$(echo "$container_info" | awk '{print $4}') done ############## cat /etc/sudoers.d/splunk splunk ALL=(ALL) NOPASSWD: /usr/bin/crictl,/usr/bin/podman ... View more

Hi @kiran_panchavat , could you please help me on this...!! ... View more

@mochocki @jkat54 @kiran_panchavat need your assistance here. ... View more

Hi @kiran_panchavat , Thank you for your valuable response. Which input do I need to provide to collect the status of "App Services"? Options: Azure Metrics Azure Resource Azure Audit ... View more

Hi @richgalloway , Thank you for your time. I have already gone through the link below and installed the "Metrics Add-on for Infrastructure" application in our stand alone Splunk Enterprise. Now trying to collect CPU, memory, process and etc. Metrics from client servers I already have Splunk Forward installed on it. So what are the configuration changes to be done on Splunk Forward Server as well as in Splunk Enterprise.  ... View more