Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Wrong Splunk Forwarder user on Windows #369

Open
Tamerz opened this issue Mar 28, 2024 · 1 comment · May be fixed by #371
Open

Wrong Splunk Forwarder user on Windows #369

Tamerz opened this issue Mar 28, 2024 · 1 comment · May be fixed by #371

Comments

@Tamerz
Copy link
Contributor

Tamerz commented Mar 28, 2024

Affected Puppet, Ruby, OS and module versions/distributions

  • Puppet: Any
  • Ruby: Any
  • Distribution: Windows (any modern version)
  • Module version: 10.0.0

How to reproduce (e.g Puppet code you use)

include puppet::forwarder

What are you seeing

The Linux package uses splunkfwd as the default user and group names. On Windows, SplunkForwarder is used for the user and group names. This causes the module to fail setting file permissions.

What behaviour did you expect instead

Output log

change from 'NT AUTHORITY\SYSTEM' to 'splunkfwd' failed: Could not find user splunkfwd

    Source: /Stage[main]/Splunk::Forwarder::Config/File[C:\Program Files\SplunkUniversalForwarder/etc/system/local/server.conf]/owner
@Tamerz
Copy link
Contributor Author

Tamerz commented Mar 28, 2024

After a little more research I can see the full user name and group name is NT SERVICE\SplunkForwarder as reported by Puppet.

@Tamerz Tamerz linked a pull request Apr 1, 2024 that will close this issue
Open
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging a pull request may close this issue.

Treat the forwarder user as a separate parameter Tamerz/puppet-splunk
1 participant
@Tamerz