Monitoring Splunk

splunkd.log WARN BTreeCP - succeeded, but unable to clean up...fishbucket/splunk_private_db/snapshot.old: Permission denied

Ellen
Splunk Employee
Splunk Employee

I see in splunkd.log the following warning. It is confusing as it says it succeeded but unable to cleanup. What does this really mean?

WARN  BTreeCP - succeeded, but unable to clean up /opt/splunk/var/lib/splunk/fishbucket/splunk_private_db/snapshot.old: Permission denied
Tags (1)
1 Solution

DerekB
Splunk Employee
Splunk Employee

These files are used to make a backup copy of the fishbucket. The error is indicating that the user Splunk is running as, doesn't have permission to the folder path listed.

To correct it, you'll need to correct the permissions listed for your user running Splunk. This should stop this error message from happening.

View solution in original post

DerekB
Splunk Employee
Splunk Employee

These files are used to make a backup copy of the fishbucket. The error is indicating that the user Splunk is running as, doesn't have permission to the folder path listed.

To correct it, you'll need to correct the permissions listed for your user running Splunk. This should stop this error message from happening.

Get Updates on the Splunk Community!

.conf24 | Day 0

Hello Splunk Community! My name is Chris, and I'm based in Canberra, Australia's capital, and I travelled for ...

Enhance Security Visibility with Splunk Enterprise Security 7.1 through Threat ...

(view in My Videos)Struggling with alert fatigue, lack of context, and prioritization around security ...

Troubleshooting the OpenTelemetry Collector

  In this tech talk, you’ll learn how to troubleshoot the OpenTelemetry collector - from checking the ...