u splunk - "Splunk Server" /opt/splunkforwarder /bin/bash