Hi Brian, Do you know when a patch will be released? Is it a simple modification to the /etc/init.d script? I see that the 6.1.x script is missing "/bin/su - splunk -c". As far as the workaround goes - I assume it won't survive a server reboot? I also noticed that the files splunk it attempting to read need the splunk user to at least have standard read granted. The ACL access is not enough. thanks, Chris ... View more