Getting Data In

input data placed on FTP

ryastrebov
Communicator

Hello!
I have Splunk installed on Linux and FTP which are placed logs.
I mount FTP-folder on Splunk's Linux computer.
But when I try to open the folder in Splunk (data input configuration) in which I mounted data with FTP, I get the error: "Unable to open the selected path".
If i try open this folder in command line, it's OK.
In what could be the problem and how it can be solved?
Thanks!

Tags (2)
0 Karma

Ayn
Legend

curlftpfs sounds very much like a FUSE file system. These generally are mounted with access only for the user who mounted them, which is what I think is causing your problem. In that case you need to use the options flag allow_other when mounting the file system in order for other users to be able to access it.

0 Karma

ryastrebov
Communicator

Ayn,
I use this flag, my command is:
curlftpfs -o allow_other ftpuser:password@myftpserver /ftpmount

All users can access to folder /ftpmount and all users can view contents of FTP on folder /ftpmount.
But when I try to open the folder in Splunk, I get the above described error...

0 Karma

ryastrebov
Communicator

Kristian, I use curlftpfs command to mount FTP resource on my Splunk server

0 Karma

ryastrebov
Communicator

Martin, user splunk have permissions on mount directory and he can read it through shell

0 Karma

kristian_kolb
Ultra Champion

just to make it clear - are you mounting a local directory (which is used for FTP as well), or are you trying to 'mount' a remote directory via FTP?

0 Karma

martin_mueller
SplunkTrust
SplunkTrust

Does the user splunk is running under have read permissions to that path?

0 Karma
Get Updates on the Splunk Community!

Webinar Recap | Revolutionizing IT Operations: The Transformative Power of AI and ML ...

The Transformative Power of AI and ML in Enhancing Observability   In the realm of IT operations, the ...

.conf24 | Registration Open!

Hello, hello! I come bearing good news: Registration for .conf24 is now open!   conf is Splunk’s rad annual ...

ICYMI - Check out the latest releases of Splunk Edge Processor

Splunk is pleased to announce the latest enhancements to Splunk Edge Processor.  HEC Receiver authorization ...