Systemd Splunk 7.3.0

[s9p1]

Affected Puppet, Ruby, OS and module versions/distributions

• Distribution: Ubuntu
• Module version: 7.3.0
• Splunk version: 7.3.0

Description

With Splunk 7.2.2 there was introduced a new parameter to configure boot-start either with initd or systemd. At first, the default was systemd, with 7.3.0 and above it is initd again.

Please add a configuration for -systemd-managed 0|1 between boot-start and -user in manifests/forwarder/service/nix.pp (if Splunk version >= 7.2.2)

https://docs.splunk.com/Documentation/Splunk/7.3.0/Admin/RunSplunkassystemdservice

On e.g. Ubuntu Systems you have to correct the generated Systemd Service file /etc/systemd/system/SplunkForwarder.service or .../Splunkd.service:

Delete the init.scope/ in following lines (between cpu/memory and system.slice):

ExecStartPost=/bin/bash -c "chown -R <uid>:<gid> /sys/fs/cgroup/cpu/system.slice/%n"
ExecStartPost=/bin/bash -c "chown -R <uid>:<gid> /sys/fs/cgroup/memory/system.slice/%n"