- Splunk Answers
- :
- Splunk Administration
- :
- Getting Data In
- :
- Re: Unable to modify props.conf
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark Topic
- Subscribe to Topic
- Mute Topic
- Printer Friendly Page
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi,
When I am trying to modify props.conf in the local directory of my app,
"Please check whether the file i opened in another program" dialog box is displaying.
I tried restarting the splunk services and also tried "...| extract reload=T" in spunk web.
Help me please
Thanks in advance
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
I'm guessing this is on Windows..
Have you checked that you have "full control" of that file in the permissions section of properties?
You could also try stopping Splunk and modify the file and restart Splunk.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
The problem is that the folder is locked by solunk.
so i copied the relevant file changed them and copy them back.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Sorry, as i am new to Splunk i was not aware of that. Thankyou MHibbin
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
@smolcj, if this has answered your question, can please mark it as accepted (the empty tick next to my answer), to "close" the question off, so the community knows it has been answered.
Thanks, and glad I could help!
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Thanks MHibbin
permissions was the issue.
Thanks
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
I'm guessing this is on Windows..
Have you checked that you have "full control" of that file in the permissions section of properties?
You could also try stopping Splunk and modify the file and restart Splunk.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
I Restart and it didnt help.
I Still cant modify the Prop.conf
Is there away to do it in the Web UI?
Stay Connected: Your Guide to May Tech Talks, Office Hours, and Webinars!
They're back! Join the SplunkTrust and MVP at .conf24
Enterprise Security Content Update (ESCU) | New Releases
