×

Join the Conversation

Without signing in, you're just watching from the sidelines. Sign in or Register to connect, share, and be part of the Splunk Community.
Ask a Question
alex12
Engager
Member since: ‎10-17-2024
‎10-17-2024
Community Statistics
Posts 1
Solutions 0
Karma Given 1
Karma Received 0
Member Since ‎10-17-2024
Activity Feed
View All

Re: CAP_DAC_READ_SEARCH working on UF but not on H...

by SplunkTrust in Splunk Enterprise
‎10-19-2024 12:50 AM
‎10-19-2024 12:50 AM
Hi @alex12  As documented here  https://docs.splunk.com/Documentation/Forwarder/9.3.1/Forwarder/Installleastprivileged the CAP_DAC_READ_SEARCH will work only with UF (not with HF)   the HF installation method (regular Splunk enterprise installation) https://docs.splunk.com/Documentation/Splunk/9.3.1/Installation/InstallonLinux   ... View more
Contact Me
Online Status
Offline
Date Last Visited
‎10-17-2024 05:08 PM
Karma given to
View All