Okok. I will try the new version and tell the developer the broken package later. Thank you very much! ... View more

Yes, I use both su root and sudo , but all get wrong ... View more

[root@localhost etc]# ps -ef | grep splunkd root 8629 2958 1 04:19 ? 00:02:03 splunkd -p 8089 restart root 8633 8629 0 04:19 ? 00:00:05 [splunkd pid=8629] splunkd -p 8089 restart [process-runner] root 8857 8633 0 04:19 ? 00:00:21 /opt/splunk/bin/splunkd instrument-resource-usage -p 8089 --with-kvstore root 16815 6045 0 07:22 pts/0 00:00:00 grep --color=auto splunkd ... View more

Thanks for your comment. However, using your suggestion the result is same: [root@localhost etc]# curl -o /tmp/SplunkAppForWazuh.tar.gz https://packages.wazuh.com/3.x/splunkapp/wazuhapp-splunk-3.11.2_8.0.0.tar.gz % Total % Received % Xferd Average Speed Time Time Time Current Dload Upload Total Spent Left Speed 100 243 0 243 0 0 222 0 --:--:-- 0:00:01 --:--:-- 222 [root@localhost etc]# /opt/splunk/bin/splunk install app /tmp/SplunkAppForWazuh.tar.gz Error during app install: failed to extract app from /tmp/SplunkAppForWazuh.tar.gz to /opt/splunk/var/run/splunk/bundle_tmp/54753e62ef7cccf6: No such file or directory Is the pemission issue or the download issue? ... View more

Thanks for your adive and I tried the commands like: /opt/splunk/bin/splunk install app /opt/splunk/bin/SplunkAppForWazuh.tar.gz But the result is the same: Error during app install: failed to extract app from /opt/splunk/bin/SplunkAppForWazuh.tar.gz to /opt/splunk/var/run/splunk/bundle_tmp/442aa3661f9da411: No such file or directory I suppose if is the permission issue and how can I confirm it? ... View more

Thanks for your answer. And the documentation shows /opt/splunk/bin/splunk install /your/path/SplunkAppForWazuh.tar.gz Here is the full path. The documentation link is https://documentation.wazuh.com/3.11/installation-guide/installing-splunk/splunk-app.html ... View more