Security

Is admin access on windows required for splunk

vaibhavagg2006
Communicator

Hi,
I am running splunk 4.3 on windows xp. I am having access issue in local folder of all the app i create in splunk. Other folders are accesible but local folder is not accessible through windows explorer.I can access the views and nav through splunk ui. I am not amdin of my system.
Admin of my system is able to access all the folders. Is there any work around for this.

Tags (3)
0 Karma

Drainy
Champion

Well, what user did you setup Splunk to run as? If you navigate to your list of services in control panel (if you have access to it) you can view what user the splunkd and splunkweb services start as. In this case its likely its configured with admin credentials for remote WMI access or as a service account which is creating objects which you don't have permission to access.

a workaround? Well, its more of a Windows security feature than an error to work around. You will need elevated privileges or the admin user to give you permission to access all of those local directories (although if its a permission issue then as soon as you create new objects you will lose access to them) or change the user account that Splunk runs as through the services menu. If you do change that then bear in mind it won't be able to access the same files you couldn't previously, you'd need to change all the folder and file permissions before restarting Splunk.

Get Updates on the Splunk Community!

Extending Observability Content to Splunk Cloud

Watch Now!   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to leverage ...

More Control Over Your Monitoring Costs with Archived Metrics!

What if there was a way you could keep all the metrics data you need while saving on storage costs?This is now ...

New in Observability Cloud - Explicit Bucket Histograms

Splunk introduces native support for histograms as a metric data type within Observability Cloud with Explicit ...