All Apps and Add-ons

FAVM problem: error when running "enginebuilder.py"

hux
New Member

I'm following the instructions here to configure data collection on my FAVM. After copying the default "engine.conf" template and configuring it with my vCenter and ESXi details, I ran "enginebuilder.py -c". But this is the output (personal stuff changed, for obvious reasons):

Checking credentials on esx/i hosts...
   checking permissions of root on [my ESXi host]...
ERROR: root has insufficient permissions on [my ESXi host]:
ran command:# logincreator.pl --target [my ESXi host] --ad 'root' --adpwd '[password for root]'
output:

Created enginehierarchy.conf
Created engineinvvc1.conf
Created enginetaskeventlogs.conf
Created engineperf.conf
Created inputs.conf

Now Splunk needs a restart!

As you can see, I'm testing this with the ESXi server's root login, which obviously does have the necessary access!

I followed the troubleshooting steps at the bottom of this page and none of those apply: usernames, passwords, DNS, subnet and IP addresses are all present, tested and correct. So now I'm stumped.

Can anyone help? As it stands, I'm not able to progress any further. 😞

0 Karma

xuanyun
Path Finder

Hi!
How do you solve this issus?

0 Karma
Get Updates on the Splunk Community!

Stay Connected: Your Guide to May Tech Talks, Office Hours, and Webinars!

Take a look below to explore our upcoming Community Office Hours, Tech Talks, and Webinars this month. This ...

They're back! Join the SplunkTrust and MVP at .conf24

With our highly anticipated annual conference, .conf, comes the fez-wearers you can trust! The SplunkTrust, as ...

Enterprise Security Content Update (ESCU) | New Releases

Last month, the Splunk Threat Research Team had two releases of new security content via the Enterprise ...