All Apps and Add-ons

NFS mount on a Windows Server 2008 R2

oliah
Engager

I created a NFS export to /etc/log on my NetApp then mount this share on the Splunk Windows Server.

[monitor:///N:]

But the filer is not showing up in the dashboard. How can I troubleshoot this?
- Is there any special config to mount the NFS share?
- What are the credentials used to access to the NFS share?

dwaddle
SplunkTrust
SplunkTrust

Some things may be playing a part here.

  1. It doesn't need to be an NFS mount necessarily, you could use CIFS (assuming your filers support CIFS and so on). Splunk just needs access to the /vol/vol0/etc/log on the filer. But, there may be other factors below that affect this negatively.
  2. On my filers, there is a broken symbolic link in /vol/vol0/etc/log that points messages -> /etc/messages. Which is not correct. It should be messages -> ../messages. If I recreate this link properly, Netapp eventually breaks it. (This may play a dual-role in #1 above because I don't know if you mount it via CIFS if the symlinks will work at all)
  3. Maybe [monitor://N:] ? The third slash there is (usually) for a unix absolute path. (But I'm not a Windows person so I may have this wrong)
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Quantify Your Splunk Investment Impact: Introducing Savings Metrics to Value Insights

Building on the foundation established in our initial Value Insights releases, we are introducing the Savings ...

Event Series: Telemetry Pipeline Management

Balancing Scale and Spend: Gaining Control Over High-Volume Metrics in Splunk Observability Cloud As ...

Kick the Tires Before You Commit: A Hands-On Tour of the Splunk Observability Cloud ...

Evaluating an enterprise observability platform usually goes like this: fill out a form, get a free trial with ...