topic Re: Failed to write usn context in Getting Data In https://community.splunk.com/t5/Getting-Data-In/Failed-to-write-usn-context/m-p/13965#M1332 <P>Glad to hear you got it fixed.<BR /> How did it get to that state, do you know?</P> Tue, 01 Jun 2010 13:32:47 GMT Ledio_Ago 2010-06-01T13:32:47Z Failed to write usn context https://community.splunk.com/t5/Getting-Data-In/Failed-to-write-usn-context/m-p/13962#M1329 <P>I am seeing the following errors over and over again in my splunkd.log file. I'm not sure where to go to resolve this. Any thoughts?</P> <P>05-20-2010 11:15:54.163 ERROR ExecProcessor - message from ""C:\Program Files\Splunk\bin\splunk-admon.exe"" splunk-admon - run: Failed to write usn context. 05-20-2010 11:15:54.163 ERROR ExecProcessor - message from ""C:\Program Files\Splunk\bin\splunk-admon.exe"" splunk-admon - main: Failed to run ADMonitor='NearestDC', targedDC='{FQDN of DC}'</P> Fri, 21 May 2010 00:22:11 GMT https://community.splunk.com/t5/Getting-Data-In/Failed-to-write-usn-context/m-p/13962#M1329 srich 2010-05-21T00:22:11Z Re: Failed to write usn context https://community.splunk.com/t5/Getting-Data-In/Failed-to-write-usn-context/m-p/13963#M1330 <P>It sounds like Active Directory monitor program, splunk-admon.exe, couldn't save its checkpoint value, which is a USN string.</P> <P>Check and see if the checkpoint file is created under:</P> <P>Splunk\var\lib\splunk\persistentstorage\ADMon\NearestDC.ini</P> <P>For some reason we can't write to that file.</P> Fri, 21 May 2010 06:52:37 GMT https://community.splunk.com/t5/Getting-Data-In/Failed-to-write-usn-context/m-p/13963#M1330 Ledio_Ago 2010-05-21T06:52:37Z Re: Failed to write usn context https://community.splunk.com/t5/Getting-Data-In/Failed-to-write-usn-context/m-p/13964#M1331 <P>The file was there but permissions were wrong. Thanx.</P> Sat, 29 May 2010 04:12:02 GMT https://community.splunk.com/t5/Getting-Data-In/Failed-to-write-usn-context/m-p/13964#M1331 srich 2010-05-29T04:12:02Z Re: Failed to write usn context https://community.splunk.com/t5/Getting-Data-In/Failed-to-write-usn-context/m-p/13965#M1332 <P>Glad to hear you got it fixed.<BR /> How did it get to that state, do you know?</P> Tue, 01 Jun 2010 13:32:47 GMT https://community.splunk.com/t5/Getting-Data-In/Failed-to-write-usn-context/m-p/13965#M1332 Ledio_Ago 2010-06-01T13:32:47Z