https://community.splunk.com/t5/Security/BucketMover-error/m-p/459479#M15510 <P>I set up a cold-to-frozen path about a month ago using RH7 and NFSv4. Everything worked the way it should. I was away for a week and this morning I found a ton of empty 'inflight-db_...' files in the frozen directories.</P> <P>I looked at the splunkd.log and these error messages appear:</P> <PRE><CODE>ERROR BucketMover - aborting move because recursive copy from src='/some/splunk/cold/db' to dst='/some/splunk/frozen/db/inflight-db...' failed (reason='Operation not permitted') </CODE></PRE> <P>Splunk has write privileges to the directories. There is plenty of disk space available.</P> <P>Any ideas?</P> Mon, 30 Jul 2018 12:09:29 GMT pil321 2018-07-30T12:09:29Z https://community.splunk.com/t5/Security/BucketMover-error/m-p/459479#M15510 <P>I set up a cold-to-frozen path about a month ago using RH7 and NFSv4. Everything worked the way it should. I was away for a week and this morning I found a ton of empty 'inflight-db_...' files in the frozen directories.</P> <P>I looked at the splunkd.log and these error messages appear:</P> <PRE><CODE>ERROR BucketMover - aborting move because recursive copy from src='/some/splunk/cold/db' to dst='/some/splunk/frozen/db/inflight-db...' failed (reason='Operation not permitted') </CODE></PRE> <P>Splunk has write privileges to the directories. There is plenty of disk space available.</P> <P>Any ideas?</P> Mon, 30 Jul 2018 12:09:29 GMT https://community.splunk.com/t5/Security/BucketMover-error/m-p/459479#M15510 pil321 2018-07-30T12:09:29Z