Getting Data In
Highlighted

Why am I unable to initialize modular input "TA-Akamai_SIEM" defined inside the app "Splunk_TA_siem_connector"?

New Member

Unable to initialize modular input "TA-AkamaiSIEM" defined inside the app "SplunkTAsiemconnector": Introspecting scheme=TA-AkamaiSIEM: Unable to run "/opt/splunk/etc/apps/SplunkTAsiemconnector/bin/TA-Akamai_SIEM.sh --scheme": child failed to start: Permission denied

Why am I getting this error? Please, can anyone explain? I am running this on Splunk Enterprise 6.6.2 SH/IDX/HF

0 Karma
Highlighted

Re: Why am I unable to initialize modular input "TA-Akamai_SIEM" defined inside the app "Splunk_TA_siem_connector"?

Champion

are you running script same user as Splunk is running?
Refer this document:
https://developer.akamai.com/tools/siem-integration/docs/Content/SetupSplunkconnector.html

0 Karma
Highlighted

Re: Why am I unable to initialize modular input "TA-Akamai_SIEM" defined inside the app "Splunk_TA_siem_connector"?

Influencer

Well the Permission denied might mean either that .sh has wrong permissions or the owner is not the user running Splunk.

Can you re-check those?

0 Karma
Highlighted

Re: Why am I unable to initialize modular input "TA-Akamai_SIEM" defined inside the app "Splunk_TA_siem_connector"?

Influencer

Please let me know if the answer was useful for you. If it was, accept it and upvote. If not, give us more input so we can help you with that

0 Karma