Getting Data In

Unable to modify props.conf

smolcj
Builder

Hi,
When I am trying to modify props.conf in the local directory of my app,
"Please check whether the file i opened in another program" dialog box is displaying.
I tried restarting the splunk services and also tried "...| extract reload=T" in spunk web.
Help me please
Thanks in advance

Tags (1)
0 Karma
1 Solution

MHibbin
Influencer

I'm guessing this is on Windows..

Have you checked that you have "full control" of that file in the permissions section of properties?

You could also try stopping Splunk and modify the file and restart Splunk.

View solution in original post

0 Karma

shayhk
Explorer

The problem is that the folder is locked by solunk.
so i copied the relevant file changed them and copy them back.

0 Karma

smolcj
Builder

Sorry, as i am new to Splunk i was not aware of that. Thankyou MHibbin

0 Karma

MHibbin
Influencer

@smolcj, if this has answered your question, can please mark it as accepted (the empty tick next to my answer), to "close" the question off, so the community knows it has been answered.

Thanks, and glad I could help!

0 Karma

smolcj
Builder

Thanks MHibbin
permissions was the issue.
Thanks

0 Karma

MHibbin
Influencer

I'm guessing this is on Windows..

Have you checked that you have "full control" of that file in the permissions section of properties?

You could also try stopping Splunk and modify the file and restart Splunk.

0 Karma

shayhk
Explorer

I Restart and it didnt help.
I Still cant modify the Prop.conf

Is there away to do it in the Web UI?

0 Karma
Get Updates on the Splunk Community!

Continuing Innovation & New Integrations Unlock Full Stack Observability For Your ...

You’ve probably heard the latest about AppDynamics joining the Splunk Observability portfolio, deepening our ...

Monitoring Amazon Elastic Kubernetes Service (EKS)

As we’ve seen, integrating Kubernetes environments with Splunk Observability Cloud is a quick and easy way to ...

Cloud Platform & Enterprise: Classic Dashboard Export Feature Deprecation

As of Splunk Cloud Platform 9.3.2408 and Splunk Enterprise 9.4, classic dashboard export features are now ...