topic Re: FilesystemChangeWatcher- error getting attributes of path - The user name or password is incorrect. in Security

FilesystemChangeWatcher- error getting attributes of path - The user name or password is incorrect.

Valdemir_Splunk — Tue, 17 Jul 2018 20:26:56 GMT

How do I set user and password in inputs.conf?

This is my file:

[monitor://\\myServer\myFolder]
disabled = false
index = myIndex
sourcetype = mySourceType
crcSalt = <SOURCE>

I already tried to add "user" and "password" but always returns the same error in the log :

FilesystemChangeWatcher- error getting attributes of path - "\\myServer\myFolder": The user name or password is incorrect.

Re: FilesystemChangeWatcher- error getting attributes of path - The user name or password is incorrect.

CarsonZa — Tue, 17 Jul 2018 20:41:48 GMT

does the user splunkd is running as have read access to that location?

Re: FilesystemChangeWatcher- error getting attributes of path - The user name or password is incorrect.

Valdemir_Splunk — Wed, 18 Jul 2018 12:31:22 GMT

The folder can only be accessed by a specific user for security reasons, is there any way to tell the credentials for the splunk to access it??

Re: FilesystemChangeWatcher- error getting attributes of path - The user name or password is incorrect.

CarsonZa — Wed, 18 Jul 2018 15:01:50 GMT

not that im aware of, you'll have to create a domain account. change the splunkd user to the domain account and then give the domain account access to that share.