topic Re: input data placed on FTP in Getting Data In

input data placed on FTP

ryastrebov — Mon, 20 May 2013 11:14:02 GMT

Hello!
I have Splunk installed on Linux and FTP which are placed logs.
I mount FTP-folder on Splunk's Linux computer.
But when I try to open the folder in Splunk (data input configuration) in which I mounted data with FTP, I get the error: "Unable to open the selected path".
If i try open this folder in command line, it's OK.
In what could be the problem and how it can be solved?
Thanks!

Re: input data placed on FTP

martin_mueller — Mon, 20 May 2013 11:37:34 GMT

Does the user splunk is running under have read permissions to that path?

Re: input data placed on FTP

kristian_kolb — Mon, 20 May 2013 11:52:52 GMT

just to make it clear - are you mounting a local directory (which is used for FTP as well), or are you trying to 'mount' a remote directory via FTP?

Re: input data placed on FTP

ryastrebov — Mon, 20 May 2013 12:12:22 GMT

Martin, user splunk have permissions on mount directory and he can read it through shell

Re: input data placed on FTP

ryastrebov — Mon, 20 May 2013 12:14:04 GMT

Kristian, I use curlftpfs command to mount FTP resource on my Splunk server

Re: input data placed on FTP

Ayn — Mon, 20 May 2013 12:26:44 GMT

curlftpfs sounds very much like a FUSE file system. These generally are mounted with access only for the user who mounted them, which is what I think is causing your problem. In that case you need to use the options flag allow_other when mounting the file system in order for other users to be able to access it.

Re: input data placed on FTP

ryastrebov — Mon, 20 May 2013 12:34:39 GMT

Ayn,
I use this flag, my command is:
curlftpfs -o allow_other ftpuser:password@myftpserver /ftpmount

All users can access to folder /ftpmount and all users can view contents of FTP on folder /ftpmount.
But when I try to open the folder in Splunk, I get the above described error...