<div dir="ltr"><div class="gmail_extra"><div class="gmail_quote">On 3 July 2013 13:32, Douglas Brown <span dir="ltr">&lt;<a href="mailto:d46.brown@student.qut.edu.au" target="_blank">d46.brown@student.qut.edu.au</a>&gt;</span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><br><div style="font-size:14px;font-family:Calibri,sans-serif;word-wrap:break-word"><div>Full splunk or just the universal forwarder? Interested to know how you go.</div>
</div></blockquote><div><br></div><div>Full Splunk but it&#39;s going to take me forever.<br><br></div><div>Found this in the meantime:<br><br><a href="http://riffraff169.wordpress.com/2011/11/22/splunk-and-selinux/">http://riffraff169.wordpress.com/2011/11/22/splunk-and-selinux/</a><br>
</div></div></div></div>