Has anybody ever had this error? If so, can you explain the meaning of it? Thanks
08-28-2016 22:03:18.924 -0400 ERROR BTreeCP - failed: failed to rename C:\Program Files\SplunkUniversalForwarder\var\lib\splunk\fishbucket\splunk_private_db\snapshot to C:\Program Files\SplunkUniversalForwarder\var\lib\splunk\fishbucket\splunk_private_db\snapshot.old: Access is denied. 2016-08-28 22:03:18.924 VES-ADV3
These sort of messages generally points to bad install of forwarder. such that Splunk is installed/owned by Root, but running account is different. Therefore, you internally get these sort of messages as access denied,or can't rename etc.
A similar one at splunkd.log WARN BTreeCP - succeeded, but unable to clean up...fishbucket/splunk_private_db/snapshot...