Getting Data In

input data placed on FTP

ryastrebov
Communicator

Hello!
I have Splunk installed on Linux and FTP which are placed logs.
I mount FTP-folder on Splunk's Linux computer.
But when I try to open the folder in Splunk (data input configuration) in which I mounted data with FTP, I get the error: "Unable to open the selected path".
If i try open this folder in command line, it's OK.
In what could be the problem and how it can be solved?
Thanks!

Tags (2)
0 Karma

Ayn
Legend

curlftpfs sounds very much like a FUSE file system. These generally are mounted with access only for the user who mounted them, which is what I think is causing your problem. In that case you need to use the options flag allow_other when mounting the file system in order for other users to be able to access it.

0 Karma

ryastrebov
Communicator

Ayn,
I use this flag, my command is:
curlftpfs -o allow_other ftpuser:password@myftpserver /ftpmount

All users can access to folder /ftpmount and all users can view contents of FTP on folder /ftpmount.
But when I try to open the folder in Splunk, I get the above described error...

0 Karma

ryastrebov
Communicator

Kristian, I use curlftpfs command to mount FTP resource on my Splunk server

0 Karma

ryastrebov
Communicator

Martin, user splunk have permissions on mount directory and he can read it through shell

0 Karma

kristian_kolb
Ultra Champion

just to make it clear - are you mounting a local directory (which is used for FTP as well), or are you trying to 'mount' a remote directory via FTP?

0 Karma

martin_mueller
SplunkTrust
SplunkTrust

Does the user splunk is running under have read permissions to that path?

0 Karma
Get Updates on the Splunk Community!

The All New Performance Insights for Splunk

Splunk gives you amazing tools to analyze system data and make business-critical decisions, react to issues, ...

Good Sourcetype Naming

When it comes to getting data in, one of the earliest decisions made is what to use as a sourcetype. Often, ...

See your relevant APM services, dashboards, and alerts in one place with the updated ...

As a Splunk Observability user, you have a lot of data you have to manage, prioritize, and troubleshoot on a ...