Splunk Enterprise

How to check which local system account splunk is using to run?

summitsplunk
Communicator

How do I verify which account splunk is running as? I want to make sure it's running as splunk and not root.

Tags (1)
0 Karma
1 Solution

FrankVl
Ultra Champion

Log in to the command line and run a command like ps aux | grep Splunk which shows the user the Splunk process runs as at the start of the line.

View solution in original post

FrankVl
Ultra Champion

Log in to the command line and run a command like ps aux | grep Splunk which shows the user the Splunk process runs as at the start of the line.

Get Updates on the Splunk Community!

Stay Connected: Your Guide to May Tech Talks, Office Hours, and Webinars!

Take a look below to explore our upcoming Community Office Hours, Tech Talks, and Webinars this month. This ...

They're back! Join the SplunkTrust and MVP at .conf24

With our highly anticipated annual conference, .conf, comes the fez-wearers you can trust! The SplunkTrust, as ...

Enterprise Security Content Update (ESCU) | New Releases

Last month, the Splunk Threat Research Team had two releases of new security content via the Enterprise ...