Getting Data In

input data placed on FTP

ryastrebov
Communicator

Hello!
I have Splunk installed on Linux and FTP which are placed logs.
I mount FTP-folder on Splunk's Linux computer.
But when I try to open the folder in Splunk (data input configuration) in which I mounted data with FTP, I get the error: "Unable to open the selected path".
If i try open this folder in command line, it's OK.
In what could be the problem and how it can be solved?
Thanks!

Tags (2)
0 Karma

Ayn
Legend

curlftpfs sounds very much like a FUSE file system. These generally are mounted with access only for the user who mounted them, which is what I think is causing your problem. In that case you need to use the options flag allow_other when mounting the file system in order for other users to be able to access it.

0 Karma

ryastrebov
Communicator

Ayn,
I use this flag, my command is:
curlftpfs -o allow_other ftpuser:password@myftpserver /ftpmount

All users can access to folder /ftpmount and all users can view contents of FTP on folder /ftpmount.
But when I try to open the folder in Splunk, I get the above described error...

0 Karma

ryastrebov
Communicator

Kristian, I use curlftpfs command to mount FTP resource on my Splunk server

0 Karma

ryastrebov
Communicator

Martin, user splunk have permissions on mount directory and he can read it through shell

0 Karma

kristian_kolb
Ultra Champion

just to make it clear - are you mounting a local directory (which is used for FTP as well), or are you trying to 'mount' a remote directory via FTP?

0 Karma

martin_mueller
SplunkTrust
SplunkTrust

Does the user splunk is running under have read permissions to that path?

0 Karma
Get Updates on the Splunk Community!

New Year. New Skills. New Course Releases from Splunk Education

A new year often inspires reflection—and reinvention. Whether your goals include strengthening your security ...

Splunk and TLS: It doesn't have to be too hard

Overview Creating a TLS cert for Splunk usage is pretty much standard openssl.  To make life better, use an ...

Faster Insights with AI, Streamlined Cloud-Native Operations, and More New Lantern ...

Splunk Lantern is a Splunk customer success center that provides practical guidance from Splunk experts on key ...