Z /opt/splunkforwarder - splunk splunk
z /opt/splunkforwarder 0750 splunk splunk