Getting Data In

input data placed on FTP

ryastrebov
Communicator

Hello!
I have Splunk installed on Linux and FTP which are placed logs.
I mount FTP-folder on Splunk's Linux computer.
But when I try to open the folder in Splunk (data input configuration) in which I mounted data with FTP, I get the error: "Unable to open the selected path".
If i try open this folder in command line, it's OK.
In what could be the problem and how it can be solved?
Thanks!

Tags (2)
0 Karma

Ayn
Legend

curlftpfs sounds very much like a FUSE file system. These generally are mounted with access only for the user who mounted them, which is what I think is causing your problem. In that case you need to use the options flag allow_other when mounting the file system in order for other users to be able to access it.

0 Karma

ryastrebov
Communicator

Ayn,
I use this flag, my command is:
curlftpfs -o allow_other ftpuser:password@myftpserver /ftpmount

All users can access to folder /ftpmount and all users can view contents of FTP on folder /ftpmount.
But when I try to open the folder in Splunk, I get the above described error...

0 Karma

ryastrebov
Communicator

Kristian, I use curlftpfs command to mount FTP resource on my Splunk server

0 Karma

ryastrebov
Communicator

Martin, user splunk have permissions on mount directory and he can read it through shell

0 Karma

kristian_kolb
Ultra Champion

just to make it clear - are you mounting a local directory (which is used for FTP as well), or are you trying to 'mount' a remote directory via FTP?

0 Karma

martin_mueller
SplunkTrust
SplunkTrust

Does the user splunk is running under have read permissions to that path?

0 Karma
Get Updates on the Splunk Community!

.conf24 | Registration Open!

Hello, hello! I come bearing good news: Registration for .conf24 is now open!   conf is Splunk’s rad annual ...

ICYMI - Check out the latest releases of Splunk Edge Processor

Splunk is pleased to announce the latest enhancements to Splunk Edge Processor.  HEC Receiver authorization ...

Introducing the 2024 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...