https://community.splunk.com/t5/Getting-Data-In/ClamAV-Last-Scanned-and-Definition-Date-not-populating/m-p/761983#M120641 <P>Good morning everyone, first time poster and very much a novice Splunk user.</P><P>My colleague is currently having an issue with our cyber team's dashboards not populating with&nbsp;ClamAV's Last Scanned and definition date properties. Currently, we're implementing&nbsp; a temporary solution for having the definition dates populate properly, by manually setting the permissions to '644' on main.cvd, daily.cvd, and bytecode.cvd, and I think also for the database, via Ansible ad-hoc command.&nbsp;Is this something I can fix my modifying the inputs.conf file? If so, what properties would I need to add?&nbsp;</P><P>For the 'Last Scanned' problem, Splunk simply shows up with 'Not Found'. I'm unsure of how to address this one, so any starters would be great.</P><P>I should add, this Splunk Enterprise instance is on an air-gapped environment.&nbsp;</P><P>Thank you all in advance</P><P>&nbsp;</P> Mon, 29 Jun 2026 14:10:16 GMT jcanoy24 2026-06-29T14:10:16Z https://community.splunk.com/t5/Getting-Data-In/ClamAV-Last-Scanned-and-Definition-Date-not-populating/m-p/761983#M120641 <P>Good morning everyone, first time poster and very much a novice Splunk user.</P><P>My colleague is currently having an issue with our cyber team's dashboards not populating with&nbsp;ClamAV's Last Scanned and definition date properties. Currently, we're implementing&nbsp; a temporary solution for having the definition dates populate properly, by manually setting the permissions to '644' on main.cvd, daily.cvd, and bytecode.cvd, and I think also for the database, via Ansible ad-hoc command.&nbsp;Is this something I can fix my modifying the inputs.conf file? If so, what properties would I need to add?&nbsp;</P><P>For the 'Last Scanned' problem, Splunk simply shows up with 'Not Found'. I'm unsure of how to address this one, so any starters would be great.</P><P>I should add, this Splunk Enterprise instance is on an air-gapped environment.&nbsp;</P><P>Thank you all in advance</P><P>&nbsp;</P> Mon, 29 Jun 2026 14:10:16 GMT https://community.splunk.com/t5/Getting-Data-In/ClamAV-Last-Scanned-and-Definition-Date-not-populating/m-p/761983#M120641 jcanoy24 2026-06-29T14:10:16Z