Getting Data In

bucketmover permission denied archiving

freeborn
Explorer

Any thoughts on why I would be getting the following error:

12-17-2014 14:34:28.167 -0700 ERROR BucketMover - aborting move because recursive copy from src='/mnt/data/msexchange/db/db_1403294053_1403292413_351' to dst='/mnt/frozen/inflight-db_1403294053_1403292413_351' failed (reason='Permission denied')

Strange thing is I do see the destination being created.

We are currently running splunk 6.2 on redhat boxes and the archive is a mounted cifs share.

Tags (3)

rcreddy06
Path Finder

Its a server error. Check directory permissions, make sure splunk user has permissions to access both locations.

Get Updates on the Splunk Community!

What's New in Splunk Cloud Platform 9.3.2411?

Hey Splunky People! We are excited to share the latest updates in Splunk Cloud Platform 9.3.2411. This release ...

Buttercup Games: Further Dashboarding Techniques (Part 6)

This series of blogs assumes you have already completed the Splunk Enterprise Search Tutorial as it uses the ...

Technical Workshop Series: Splunk Data Management and SPL2 | Register here!

Hey, Splunk Community! Ready to take your data management skills to the next level? Join us for a 3-part ...