https://community.splunk.com/t5/Getting-Data-In/Not-able-to-start-Splunk-on-Windows-when-coldpath-is-set-to-a/m-p/74714#M15249 <P>We have configured Splunk 4.2.2 running on Windows Server 2008 R2 with a coldPath pointing to a volume ("cold") hosted on a CIFS network drive.</P> <P>Contents of indexes.conf :<BR /> #Volume Definition</P> <PRE><CODE>[volume:cold] path = \\sjc-vault\SplunkArchive\splunk01 maxVolumeDataSizeMB = 1000000 ################################################################################ # index definitions ################################################################################ [main] coldPath = volume:cold\defaultdb\colddb [history] coldPath = volume:cold\historydb\colddb [summary] coldPath = volume:cold\summarydb\colddb [_internal] coldPath = volume:cold\_internaldb\colddb [_audit] coldPath = volume:cold\audit\colddb [_thefishbucket] coldPath = volume:cold\fishbucket\colddb [_blocksignature] coldPath = volume:cold\blockSignature\colddb </CODE></PRE> <P>However, we get errors on startup for every index with a cold path set to the remote network drive:</P> <PRE><CODE>In handler 'indexes': Unable to load index configuration: In index '_internal': Failed to create directory '\\sjc-vault\SplunkArchive\splunk02\_internaldb\colddb' (Cannot create a file when that file already exists. </CODE></PRE> <P>We are using a domain account to run splunkd. This account has full rights to the shares and folders, therefore this should not be a permission issue.</P> <P>Any advice is appreciated!</P> Tue, 13 Sep 2011 21:32:11 GMT zliu 2011-09-13T21:32:11Z https://community.splunk.com/t5/Getting-Data-In/Not-able-to-start-Splunk-on-Windows-when-coldpath-is-set-to-a/m-p/74714#M15249 <P>We have configured Splunk 4.2.2 running on Windows Server 2008 R2 with a coldPath pointing to a volume ("cold") hosted on a CIFS network drive.</P> <P>Contents of indexes.conf :<BR /> #Volume Definition</P> <PRE><CODE>[volume:cold] path = \\sjc-vault\SplunkArchive\splunk01 maxVolumeDataSizeMB = 1000000 ################################################################################ # index definitions ################################################################################ [main] coldPath = volume:cold\defaultdb\colddb [history] coldPath = volume:cold\historydb\colddb [summary] coldPath = volume:cold\summarydb\colddb [_internal] coldPath = volume:cold\_internaldb\colddb [_audit] coldPath = volume:cold\audit\colddb [_thefishbucket] coldPath = volume:cold\fishbucket\colddb [_blocksignature] coldPath = volume:cold\blockSignature\colddb </CODE></PRE> <P>However, we get errors on startup for every index with a cold path set to the remote network drive:</P> <PRE><CODE>In handler 'indexes': Unable to load index configuration: In index '_internal': Failed to create directory '\\sjc-vault\SplunkArchive\splunk02\_internaldb\colddb' (Cannot create a file when that file already exists. </CODE></PRE> <P>We are using a domain account to run splunkd. This account has full rights to the shares and folders, therefore this should not be a permission issue.</P> <P>Any advice is appreciated!</P> Tue, 13 Sep 2011 21:32:11 GMT https://community.splunk.com/t5/Getting-Data-In/Not-able-to-start-Splunk-on-Windows-when-coldpath-is-set-to-a/m-p/74714#M15249 zliu 2011-09-13T21:32:11Z https://community.splunk.com/t5/Getting-Data-In/Not-able-to-start-Splunk-on-Windows-when-coldpath-is-set-to-a/m-p/74715#M15250 <P>Curious about the msg itself: Does '\sjc-vault\SplunkArchive\splunk02_internaldb\colddb' already exist? (if yes, can you delete that and start splunk up again)</P> Wed, 14 Sep 2011 11:31:38 GMT https://community.splunk.com/t5/Getting-Data-In/Not-able-to-start-Splunk-on-Windows-when-coldpath-is-set-to-a/m-p/74715#M15250 LCM 2011-09-14T11:31:38Z https://community.splunk.com/t5/Getting-Data-In/Not-able-to-start-Splunk-on-Windows-when-coldpath-is-set-to-a/m-p/74716#M15251 <P>CIFS is not a currently supported file system for Splunk indexing. Please check here for updates as new version of Splunk are made available: <A href="http://docs.splunk.com/Documentation/Splunk/latest/Installation/Systemrequirements#Supported_file_systems">System Requirements:Supported File Systems</A></P> Fri, 15 Jun 2012 19:58:57 GMT https://community.splunk.com/t5/Getting-Data-In/Not-able-to-start-Splunk-on-Windows-when-coldpath-is-set-to-a/m-p/74716#M15251 ekost 2012-06-15T19:58:57Z