SELinux
This documentation does not apply to the most recent version of Splunk. Click here for the latest version.
SELinux
If you have SELinux active on your system, you need to add splunk to the authenticated apps that can run in your SELinux environment.
To configure selinux to allow splunk to run, you need to run the
chcon command on the splunk lib directory. Here is what you type :
chcon -c -v -R -u system_u -r object_r -t lib_t $SPLUNK_HOME/lib 2>&1 > /dev/null
You also need to disable the check when splunk starts by adding this line
to the $SPLUNK_HOME/bin/setSplunkEnv script
export SPLUNK_IGNORE_SELINUX=1
This documentation applies to the following versions of Splunk: 3.1 , 3.1.1 , 3.1.2 , 3.1.3 , 3.1.4 View the Article History for its revisions.