Monitor input error

[franciscof]

Hi guys, I´ve been trying to add data on my HF and when I get to submit my input I receive this error:

I do not know what "could not find writer for: /nobody/..." means...

Could you please help me figure it out?

Thanks in advance.

[rnowitzki]

Hi @franciscof ,

You should find details in the splunkd.log
Try searching for esxifw.log, or maybe "nobody" around the time you tried to create the monitor.

Hope it helps.
BR
Ralph

[franciscof]

Hi, this is what I see when I check on the logs from the splunkd.log

Still think this is a little unclear. What do you think?

[rnowitzki · Accepted solution]

I don't have a good idea right now. 😕

The splunk user can read the file being monitored, right?

[franciscof]

That was the issue, root had permissions on the directory, thanks for you help