Getting Data In

Unable to modify props.conf

smolcj
Builder

Hi,
When I am trying to modify props.conf in the local directory of my app,
"Please check whether the file i opened in another program" dialog box is displaying.
I tried restarting the splunk services and also tried "...| extract reload=T" in spunk web.
Help me please
Thanks in advance

Tags (1)
0 Karma
1 Solution

MHibbin
Influencer

I'm guessing this is on Windows..

Have you checked that you have "full control" of that file in the permissions section of properties?

You could also try stopping Splunk and modify the file and restart Splunk.

View solution in original post

0 Karma

shayhk
Explorer

The problem is that the folder is locked by solunk.
so i copied the relevant file changed them and copy them back.

0 Karma

smolcj
Builder

Sorry, as i am new to Splunk i was not aware of that. Thankyou MHibbin

0 Karma

MHibbin
Influencer

@smolcj, if this has answered your question, can please mark it as accepted (the empty tick next to my answer), to "close" the question off, so the community knows it has been answered.

Thanks, and glad I could help!

0 Karma

smolcj
Builder

Thanks MHibbin
permissions was the issue.
Thanks

0 Karma

MHibbin
Influencer

I'm guessing this is on Windows..

Have you checked that you have "full control" of that file in the permissions section of properties?

You could also try stopping Splunk and modify the file and restart Splunk.

0 Karma

shayhk
Explorer

I Restart and it didnt help.
I Still cant modify the Prop.conf

Is there away to do it in the Web UI?

0 Karma
Get Updates on the Splunk Community!

Harnessing Splunk’s Federated Search for Amazon S3

Managing your data effectively often means balancing performance, costs, and compliance. Splunk’s Federated ...

Infographic provides the TL;DR for the 2024 Splunk Career Impact Report

We’ve been buzzing with excitement about the recent validation of Splunk Education! The 2024 Splunk Career ...

Enterprise Security Content Update (ESCU) | New Releases

In December, the Splunk Threat Research Team had 1 release of new security content via the Enterprise Security ...