Hi,
I've set the splunkd service account to a domain account that has local administrator rights on both the splunk server machine and the client from where i need to access the file share. I've also checked that the user has full control on the shared folder (Share and NTFS permissions) however i'm still getting :
TailingProcessor - Insufficient permissions to read file (hint: Access is denied.) when splunk
tries to read those files.
The splunk server is on Windows 2003 Machine (x86) while the file share is located on a Windows Server 2008 R2 machine (x64). I'm using version Splunk 4.1.7.
Let me know if you have any ideas on why splunk isn't reading data from the log files in the fileshare.
Regards,
Cosmin
... View more