Splunk user is unable to read /var/log/audit/audit.log files

Issue

Getting "permission denied" error when splunk user was trying to read /var/log/audit/audit.log files

A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.

Here are the common uses of Markdown.

Code blocks

~~~
Code surrounded in tildes is easier to read
~~~

Links/URLs

[Red Hat Customer Portal](https://access.redhat.com)