topic Re: Monitor input error in Getting Data In

Monitor input error

franciscof — Wed, 14 Oct 2020 20:16:55 GMT

Hi guys, I´ve been trying to add data on my HF and when I get to submit my input I receive this error:

I do not know what "could not find writer for: /nobody/..." means...

Could you please help me figure it out?

Thanks in advance.

Re: Monitor input error

rnowitzki — Thu, 15 Oct 2020 10:16:24 GMT

Hi @franciscof ,

You should find details in the splunkd.log
Try searching for esxifw.log, or maybe "nobody" around the time you tried to create the monitor.

Hope it helps.
BR
Ralph

Re: Monitor input error

franciscof — Thu, 15 Oct 2020 15:06:07 GMT

Hi, this is what I see when I check on the logs from the splunkd.log

Still think this is a little unclear. What do you think?

Re: Monitor input error

rnowitzki — Thu, 15 Oct 2020 16:39:46 GMT

I don't have a good idea right now. 😕

The splunk user can read the file being monitored, right?

Re: Monitor input error

franciscof — Fri, 16 Oct 2020 15:18:25 GMT

That was the issue, root had permissions on the directory, thanks for you help