All Apps and Add-ons

FAVM problem: error when running "enginebuilder.py"

hux
New Member

I'm following the instructions here to configure data collection on my FAVM. After copying the default "engine.conf" template and configuring it with my vCenter and ESXi details, I ran "enginebuilder.py -c". But this is the output (personal stuff changed, for obvious reasons):

Checking credentials on esx/i hosts...
   checking permissions of root on [my ESXi host]...
ERROR: root has insufficient permissions on [my ESXi host]:
ran command:# logincreator.pl --target [my ESXi host] --ad 'root' --adpwd '[password for root]'
output:

Created enginehierarchy.conf
Created engineinvvc1.conf
Created enginetaskeventlogs.conf
Created engineperf.conf
Created inputs.conf

Now Splunk needs a restart!

As you can see, I'm testing this with the ESXi server's root login, which obviously does have the necessary access!

I followed the troubleshooting steps at the bottom of this page and none of those apply: usernames, passwords, DNS, subnet and IP addresses are all present, tested and correct. So now I'm stumped.

Can anyone help? As it stands, I'm not able to progress any further. 😞

0 Karma

xuanyun
Path Finder

Hi!
How do you solve this issus?

0 Karma
Get Updates on the Splunk Community!

Accelerating Observability as Code with the Splunk AI Assistant

We’ve seen in previous posts what Observability as Code (OaC) is and how it’s now essential for managing ...

Integrating Splunk Search API and Quarto to Create Reproducible Investigation ...

 Splunk is More Than Just the Web Console For Digital Forensics and Incident Response (DFIR) practitioners, ...

Congratulations to the 2025-2026 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...