https://community.splunk.com/t5/Getting-Data-In/Problem-with-network-logs/m-p/156134#M31671 <P>That is good - but what user are you signed in as? What user credentials does the Splunk service use?</P> Thu, 24 Jul 2014 22:43:10 GMT lguinn2 2014-07-24T22:43:10Z https://community.splunk.com/t5/Getting-Data-In/Problem-with-network-logs/m-p/156131#M31668 <P>I setup a data input from a network source. They are IIS logs and they reside on a networked drive. I setup the input to continuously monitor the directory. Splunk is not indexing the data. When I go into the splunkd log I see the following:</P> <P><CODE>WARN FilesystemChangeWatcher - error reading directory "\\Server\inetpub\logs\LogFiles\W3SVC4": The operation completed successfully.</CODE></P> <P>Any ideas on what I have done wrong or what other steps I need to take to get the data to index? Do I need to add entries into local .conf files? When I was building the dashboards I moved some of the log files locally to the splunk system and indexed them, the logs indexed with no issues. Any advice is welcomed.</P> Thu, 24 Jul 2014 14:32:20 GMT https://community.splunk.com/t5/Getting-Data-In/Problem-with-network-logs/m-p/156131#M31668 Bliide 2014-07-24T14:32:20Z https://community.splunk.com/t5/Getting-Data-In/Problem-with-network-logs/m-p/156132#M31669 <P>Does the account that is running Splunk have the domain-level access that is necessary to read directories on a network drive?</P> Thu, 24 Jul 2014 15:43:11 GMT https://community.splunk.com/t5/Getting-Data-In/Problem-with-network-logs/m-p/156132#M31669 lguinn2 2014-07-24T15:43:11Z https://community.splunk.com/t5/Getting-Data-In/Problem-with-network-logs/m-p/156133#M31670 <P>I can view the logs across the network while remoted into the system with the Splunk installation.</P> Thu, 24 Jul 2014 20:05:28 GMT https://community.splunk.com/t5/Getting-Data-In/Problem-with-network-logs/m-p/156133#M31670 Bliide 2014-07-24T20:05:28Z https://community.splunk.com/t5/Getting-Data-In/Problem-with-network-logs/m-p/156134#M31671 <P>That is good - but what user are you signed in as? What user credentials does the Splunk service use?</P> Thu, 24 Jul 2014 22:43:10 GMT https://community.splunk.com/t5/Getting-Data-In/Problem-with-network-logs/m-p/156134#M31671 lguinn2 2014-07-24T22:43:10Z