Community:SplunkOnSELinux
From Splunk Wiki
Running Splunk on SELinux
On RHEL 6 there is no need to change anything in relation to SELinux for Splunk to work correctly. However, it's a good idea to confine Splunk with SELinux to take advantage of the protection it provides. See here for more information: https://github.com/doksu/selinux_policy_for_splunk
