Jewnix

Now I'm thinking if [this](https://github.com/splunk/ansible-role-for-splunk/blob/master/roles/splunk/tasks/install_splunk.yml#L15) should have been `group` instead of `groups`.

The packages var has been annoying me for some time. IMO, the default packages should be `acl` and `sysstat` only, Those are required for setting permissions, and for the *NIX...

@zyphermonkey > It will fail, but at that point I think it's on the user who set the customization to use a non available package to remove it from their...

@arcsector 1. The `splunk set log-level` is not persistent, and is only used to change the level on a running instance temporarily. 2. Can you add the option to configure...

> Following the "least privilege" model we should only be running things as root when absolutely necessary. There are a lot of things that need to be done with securing...

@zyphermonkey > If we keep the old cron job which runs as root, and change the owner to splunk_nix_user, that will allow the splunk user to modify the script, and...

After some preliminary testing, there are some issues that need to be addressed here. 1. I think the `adhoc_destructive_resync_kvstore.yml` task should be removed from the PR. Some things there do...