Security

Is admin access on windows required for splunk

vaibhavagg2006
Communicator

Hi,
I am running splunk 4.3 on windows xp. I am having access issue in local folder of all the app i create in splunk. Other folders are accesible but local folder is not accessible through windows explorer.I can access the views and nav through splunk ui. I am not amdin of my system.
Admin of my system is able to access all the folders. Is there any work around for this.

Tags (3)
0 Karma

Drainy
Champion

Well, what user did you setup Splunk to run as? If you navigate to your list of services in control panel (if you have access to it) you can view what user the splunkd and splunkweb services start as. In this case its likely its configured with admin credentials for remote WMI access or as a service account which is creating objects which you don't have permission to access.

a workaround? Well, its more of a Windows security feature than an error to work around. You will need elevated privileges or the admin user to give you permission to access all of those local directories (although if its a permission issue then as soon as you create new objects you will lose access to them) or change the user account that Splunk runs as through the services menu. If you do change that then bear in mind it won't be able to access the same files you couldn't previously, you'd need to change all the folder and file permissions before restarting Splunk.

Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Monitoring AI Agents with Splunk Observability Cloud

Let’s say I’m running a travel planning AI app in production. A user asks for three concise hotel options in ...

[Puzzles] Solve, Learn, Repeat: Tiling

This puzzle (first published here) is based on finding groups of tessellated tiles (inspired by floor tiles I ...

SOK it to Me: Top 3 Benefits of Using Splunk Operator on Kubernetes that’ll Make ...

    Thursday, July 9, 2026  |  11:00AM–12:00PM PDT Duration: 1 hour (includes Q&A) Managing can feel like a ...