Security

Is admin access on windows required for splunk

vaibhavagg2006
Communicator

Hi,
I am running splunk 4.3 on windows xp. I am having access issue in local folder of all the app i create in splunk. Other folders are accesible but local folder is not accessible through windows explorer.I can access the views and nav through splunk ui. I am not amdin of my system.
Admin of my system is able to access all the folders. Is there any work around for this.

Tags (3)
0 Karma

Drainy
Champion

Well, what user did you setup Splunk to run as? If you navigate to your list of services in control panel (if you have access to it) you can view what user the splunkd and splunkweb services start as. In this case its likely its configured with admin credentials for remote WMI access or as a service account which is creating objects which you don't have permission to access.

a workaround? Well, its more of a Windows security feature than an error to work around. You will need elevated privileges or the admin user to give you permission to access all of those local directories (although if its a permission issue then as soon as you create new objects you will lose access to them) or change the user account that Splunk runs as through the services menu. If you do change that then bear in mind it won't be able to access the same files you couldn't previously, you'd need to change all the folder and file permissions before restarting Splunk.

Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...