topic Re: How to add / mount a folder? in Getting Data In

How to add / mount a folder?

neilmac64 — Thu, 02 Mar 2023 11:51:40 GMT

I am running Splunk in Docker on my local machine. I would like to monitor a directory folder also on my local machine where data will be posted (csv files which I would like to index).

I go to:

Data Inputs > Files and Directories > Add New
- File or Directory

If I use Browse, I can't find my directory - assume as it isn't mounted.

If I add the path to the folder, I get an error saying "This path does not exist or is not accessible."

It seems it should be easy to add a folder for monitoring - as yet I can't find a way to do it.

Can anyone point me in the right direction?

Many thanks in advance.

Re: How to add / mount a folder?

ITWhisperer — Thu, 02 Mar 2023 12:00:17 GMT

This seems like a Docker problem(?) not a Splunk problem - you need to set up your Docker instance to have access to your local machine file system. Given that the essence of Docker is containment, this sounds like a non-trivial task!

Re: How to add / mount a folder?

neilmac64 — Thu, 02 Mar 2023 12:05:47 GMT

How do you do it in a non-docker environment?

Re: How to add / mount a folder?

ITWhisperer — Thu, 02 Mar 2023 12:09:11 GMT

That depends on how your non-Docker environment is set up. I use WSL on my PC which automatically mounts the C drive under /mnt and is therefore easy to find.

Re: How to add / mount a folder?

PickleRick — Thu, 02 Mar 2023 14:29:21 GMT

Other way to go around the problem would be to install UF in the "main" system and forward events read by UF into the dockerized Splunk instance.