All,  I am working on a App with some custom command and it requires me to start a bit. Is there a way to speed up the restarts? Right now it's about 45 seconds. (8 core, 64gig, m2) with latest Splunk Container.    Right now I have shell into the Enterprise container and I just sudo restart the splunk bin.  Maybe? ... - Maybe remove some apps? If so which are safe to remove that are packaged with Splunk without causing issues?  - Can I get rid of the splunk web login and log directly in as admin?    Any ideas?  thanks! -Daniel   ... View more

All,  I've noticed by default that Splunk Forwarder gives itself /bin/bash  in /etc/passwd.  e.g. splunk:x:1001:1001:Splunk Server:/opt/splunkforwarder:/bin/bash I changed it to the below and restarted: splunk:x:1001:1001:Splunk Server:/opt/splunkforwarder:/sbin/nologin Best I can tell there was no impact. Scripted inputs are working as it the monitor stanza's.  Is there any reason I should leave Splunk user with a Shell?    thanks! ... View more