Getting Data In

How to add a UNC paths shared folder to inputs.conf in universal forwarder?

Ammar
Explorer

am trying to add new input in the inputs.conf which is a network shared folder   to forward some logs from a device where it has no forward logs option 

when viewing splunkd.log i see that the username and password are wrong

09-19-2023 21:59:46.953 +0300 WARN FilesystemChangeWatcher [10812 MainTailingThread] - error getting attributes of path "\\192.168.1.142\df\InvalidPasswordAttempts.log": The user name or password is incorrect.

although i can access the shared folder with a browser on the UF host with no problems 

by the way am using my Microsoft account to login to the windows11 where the UF resides

any suggestions ?

 

thanks 

Labels (1)
0 Karma
Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

In January, the Splunk Threat Research Team had one release of new security content via the Splunk ES Content ...

Expert Tips from Splunk Professional Services, Ensuring Compliance, and More New ...

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

Observability Release Update: AI Assistant, AppD + Observability Cloud Integrations & ...

This month’s releases across the Splunk Observability portfolio deliver earlier detection and faster ...