All Apps and Add-ons

NFS mount on a Windows Server 2008 R2

oliah
Engager

I created a NFS export to /etc/log on my NetApp then mount this share on the Splunk Windows Server.

[monitor:///N:]

But the filer is not showing up in the dashboard. How can I troubleshoot this?
- Is there any special config to mount the NFS share?
- What are the credentials used to access to the NFS share?

dwaddle
SplunkTrust
SplunkTrust

Some things may be playing a part here.

  1. It doesn't need to be an NFS mount necessarily, you could use CIFS (assuming your filers support CIFS and so on). Splunk just needs access to the /vol/vol0/etc/log on the filer. But, there may be other factors below that affect this negatively.
  2. On my filers, there is a broken symbolic link in /vol/vol0/etc/log that points messages -> /etc/messages. Which is not correct. It should be messages -> ../messages. If I recreate this link properly, Netapp eventually breaks it. (This may play a dual-role in #1 above because I don't know if you mount it via CIFS if the symlinks will work at all)
  3. Maybe [monitor://N:] ? The third slash there is (usually) for a unix absolute path. (But I'm not a Windows person so I may have this wrong)
Get Updates on the Splunk Community!

.conf25 technical session recap of Observability for Gen AI: Monitoring LLM ...

If you’re unfamiliar, .conf is Splunk’s premier event where the Splunk community, customers, partners, and ...

A Season of Skills: New Splunk Courses to Light Up Your Learning Journey

There’s something special about this time of year—maybe it’s the glow of the holidays, maybe it’s the ...

Announcing the Migration of the Splunk Add-on for Microsoft Azure Inputs to ...

Announcing the Migration of the Splunk Add-on for Microsoft Azure Inputs to Officially Supported Splunk ...