FAQ » History » Version 1
Luke Murphey, 11/18/2015 08:12 PM
1 | 1 | Luke Murphey | h1. FAQ |
---|---|---|---|
2 | 1 | Luke Murphey | |
3 | 1 | Luke Murphey | h2. How can I monitor files via UNC paths? |
4 | 1 | Luke Murphey | |
5 | 1 | Luke Murphey | You can monitor directories and files via UNC paths provided that: |
6 | 1 | Luke Murphey | |
7 | 1 | Luke Murphey | # The account that Splunk runs under has access to the UNC path |
8 | 1 | Luke Murphey | # The input is running on Windows |
9 | 1 | Luke Murphey | |
10 | 1 | Luke Murphey | If you run Splunk under a domain account then you will likely need to update the permissions of the $SPLUNK_HOME\var\lib\splunk\modinputs\file_meta_data directory in order to make sure that the modular input has access to the checkpoint data. If you don't, you will see an error like this: |
11 | 1 | Luke Murphey | |
12 | 1 | Luke Murphey | <pre> |
13 | 1 | Luke Murphey | IOError: [Errno 13] Permission denied: u'C:\Program Files\Splunk\var\lib\splunk\modinputs\file_meta_data\6ca8dc8f8956b39f61fb8c69837222ffaa0dae4b5a918cbf130d2284.json' |
14 | 1 | Luke Murphey | </pre> |