Security

Is admin access on windows required for splunk

vaibhavagg2006
Communicator

Hi,
I am running splunk 4.3 on windows xp. I am having access issue in local folder of all the app i create in splunk. Other folders are accesible but local folder is not accessible through windows explorer.I can access the views and nav through splunk ui. I am not amdin of my system.
Admin of my system is able to access all the folders. Is there any work around for this.

Tags (3)
0 Karma

Drainy
Champion

Well, what user did you setup Splunk to run as? If you navigate to your list of services in control panel (if you have access to it) you can view what user the splunkd and splunkweb services start as. In this case its likely its configured with admin credentials for remote WMI access or as a service account which is creating objects which you don't have permission to access.

a workaround? Well, its more of a Windows security feature than an error to work around. You will need elevated privileges or the admin user to give you permission to access all of those local directories (although if its a permission issue then as soon as you create new objects you will lose access to them) or change the user account that Splunk runs as through the services menu. If you do change that then bear in mind it won't be able to access the same files you couldn't previously, you'd need to change all the folder and file permissions before restarting Splunk.

Get Updates on the Splunk Community!

.conf24 | Registration Open!

Hello, hello! I come bearing good news: Registration for .conf24 is now open!   conf is Splunk’s rad annual ...

ICYMI - Check out the latest releases of Splunk Edge Processor

Splunk is pleased to announce the latest enhancements to Splunk Edge Processor.  HEC Receiver authorization ...

Introducing the 2024 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...