Getting Data In

Why am I unable to initialize modular input "TA-Akamai_SIEM" defined inside the app "Splunk_TA_siem_connector"?

emanu
New Member

Unable to initialize modular input "TA-Akamai_SIEM" defined inside the app "Splunk_TA_siem_connector": Introspecting scheme=TA-Akamai_SIEM: Unable to run "/opt/splunk/etc/apps/Splunk_TA_siem_connector/bin/TA-Akamai_SIEM.sh --scheme": child failed to start: Permission denied

Why am I getting this error? Please, can anyone explain? I am running this on Splunk Enterprise 6.6.2 SH/IDX/HF

0 Karma

tiagofbmm
Influencer

Well the Permission denied might mean either that .sh has wrong permissions or the owner is not the user running Splunk.

Can you re-check those?

0 Karma

tiagofbmm
Influencer

Please let me know if the answer was useful for you. If it was, accept it and upvote. If not, give us more input so we can help you with that

0 Karma

p_gurav
Champion

are you running script same user as Splunk is running?
Refer this document:
https://developer.akamai.com/tools/siem-integration/docs/Content/SetupSplunkconnector.html

0 Karma
Get Updates on the Splunk Community!

Stay Connected: Your Guide to May Tech Talks, Office Hours, and Webinars!

Take a look below to explore our upcoming Community Office Hours, Tech Talks, and Webinars this month. This ...

They're back! Join the SplunkTrust and MVP at .conf24

With our highly anticipated annual conference, .conf, comes the fez-wearers you can trust! The SplunkTrust, as ...

Enterprise Security Content Update (ESCU) | New Releases

Last month, the Splunk Threat Research Team had two releases of new security content via the Enterprise ...