splunkd.log WARN BTreeCP - succeeded, but unable to clean up...fishbucket/splunk_private_db/snapshot.old: Permission denied

[Ellen]

I see in splunkd.log the following warning. It is confusing as it says it succeeded but unable to cleanup. What does this really mean?

WARN  BTreeCP - succeeded, but unable to clean up /opt/splunk/var/lib/splunk/fishbucket/splunk_private_db/snapshot.old: Permission denied

[DerekB · Accepted solution]

These files are used to make a backup copy of the fishbucket. The error is indicating that the user Splunk is running as, doesn't have permission to the folder path listed.

To correct it, you'll need to correct the permissions listed for your user running Splunk. This should stop this error message from happening.