Solved: Splunk Forwarder unable to read inputs.conf file

Splunker8 · ‎05-29-2023

05-29-2023 06:00:46.836 +0000 WARN ConfigWatcher [249660 SplunkConfigChangeWatcherThread] - Failed to read file to checksum in init(), path=/opt/splunkforwarder/etc/apps/app1/local/inputs.conf

05-29-2023 06:00:46.836 +0000 ERROR ConfigWatcher [249660 SplunkConfigChangeWatcherThread] - initialization failed for path=/opt/splunkforwarder/etc/apps/app1/local/inputs.conf

Splunk Forwarder unable to read inputs.conf file. Seeing above 2 issues in splunkd.log

richgalloway · ‎05-29-2023

Check the permissions on the file.

---
If this reply helps you, Karma would be appreciated.

View solution in original post

richgalloway · ‎05-29-2023

Check the permissions on the file.

---
If this reply helps you, Karma would be appreciated.

Splunk Forwarder unable to read inputs.conf file

inputs.conf

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Defend at Machine Speed: Your Guide to Security Sessions at .conf26

Where Innovation Takes Flight: The Splunk4Aviation Flight Sim Lands at .conf26

Turn Cisco Telemetry Into Action with Cisco Data Fabric, powered by the Splunk ...

Join the Conversation