Any thoughts on why I would be getting the following error:
12-17-2014 14:34:28.167 -0700 ERROR BucketMover - aborting move because recursive copy from src='/mnt/data/msexchange/db/db_1403294053_1403292413_351' to dst='/mnt/frozen/inflight-db_1403294053_1403292413_351' failed (reason='Permission denied')
Strange thing is I do see the destination being created.
We are currently running splunk 6.2 on redhat boxes and the archive is a mounted cifs share.
Its a server error. Check directory permissions, make sure splunk user has permissions to access both locations.