https://community.splunk.com/t5/All-Apps-and-Add-ons/Splunk-App-for-Windows-Infrastructure-Created-quot-sendtoindexer/m-p/252140#M28947 <P>I have created a "sendtoindexer" app following Splunk App for Windows Infrastructure 1.4 documentation and I cannot seem to get the outputs.conf file to push down to the deployment client. The app is showing as installed from the deployment server but I do not see any outputs.conf file on the deployment client. The rest of the folders and files of the app exist on the client but no outputs.conf. </P> <P>I have restarted Splunk services on the deployment client, reloaded the deployment server, and restarted Splunk on the deployment server but outputs.conf will not push down to the deployment client. </P> <P>Thanks in advance. </P> Wed, 30 Nov 2016 20:57:48 GMT gstefancyk 2016-11-30T20:57:48Z https://community.splunk.com/t5/All-Apps-and-Add-ons/Splunk-App-for-Windows-Infrastructure-Created-quot-sendtoindexer/m-p/252140#M28947 <P>I have created a "sendtoindexer" app following Splunk App for Windows Infrastructure 1.4 documentation and I cannot seem to get the outputs.conf file to push down to the deployment client. The app is showing as installed from the deployment server but I do not see any outputs.conf file on the deployment client. The rest of the folders and files of the app exist on the client but no outputs.conf. </P> <P>I have restarted Splunk services on the deployment client, reloaded the deployment server, and restarted Splunk on the deployment server but outputs.conf will not push down to the deployment client. </P> <P>Thanks in advance. </P> Wed, 30 Nov 2016 20:57:48 GMT https://community.splunk.com/t5/All-Apps-and-Add-ons/Splunk-App-for-Windows-Infrastructure-Created-quot-sendtoindexer/m-p/252140#M28947 gstefancyk 2016-11-30T20:57:48Z https://community.splunk.com/t5/All-Apps-and-Add-ons/Splunk-App-for-Windows-Infrastructure-Created-quot-sendtoindexer/m-p/252141#M28948 <P>Looking in splunkd logs I have found my issue but I am not sure why I am running into these permissions issues..</P> <P>11-30-2016 16:11:03.548 -0500 ERROR Archiver - Failed to open file="C:\Program Files\Splunk\etc\deployment-apps\sendtoindexer\local\outputs.conf": Access is denied.</P> <P>I have fixed this issue by adding SYSTEM to have full control of the file, but moving forward how do I prevent this when creating additional files?</P> Wed, 30 Nov 2016 21:20:05 GMT https://community.splunk.com/t5/All-Apps-and-Add-ons/Splunk-App-for-Windows-Infrastructure-Created-quot-sendtoindexer/m-p/252141#M28948 gstefancyk 2016-11-30T21:20:05Z https://community.splunk.com/t5/All-Apps-and-Add-ons/Splunk-App-for-Windows-Infrastructure-Created-quot-sendtoindexer/m-p/252142#M28949 <P>What use is Splunk running as? Local System?</P> Wed, 30 Nov 2016 22:21:46 GMT https://community.splunk.com/t5/All-Apps-and-Add-ons/Splunk-App-for-Windows-Infrastructure-Created-quot-sendtoindexer/m-p/252142#M28949 Heff 2016-11-30T22:21:46Z https://community.splunk.com/t5/All-Apps-and-Add-ons/Splunk-App-for-Windows-Infrastructure-Created-quot-sendtoindexer/m-p/252143#M28950 <P>Splunk is running as local system. </P> Fri, 02 Dec 2016 12:35:41 GMT https://community.splunk.com/t5/All-Apps-and-Add-ons/Splunk-App-for-Windows-Infrastructure-Created-quot-sendtoindexer/m-p/252143#M28950 gstefancyk 2016-12-02T12:35:41Z