Security

Is admin access on windows required for splunk

vaibhavagg2006
Communicator

Hi,
I am running splunk 4.3 on windows xp. I am having access issue in local folder of all the app i create in splunk. Other folders are accesible but local folder is not accessible through windows explorer.I can access the views and nav through splunk ui. I am not amdin of my system.
Admin of my system is able to access all the folders. Is there any work around for this.

Tags (3)
0 Karma

Drainy
Champion

Well, what user did you setup Splunk to run as? If you navigate to your list of services in control panel (if you have access to it) you can view what user the splunkd and splunkweb services start as. In this case its likely its configured with admin credentials for remote WMI access or as a service account which is creating objects which you don't have permission to access.

a workaround? Well, its more of a Windows security feature than an error to work around. You will need elevated privileges or the admin user to give you permission to access all of those local directories (although if its a permission issue then as soon as you create new objects you will lose access to them) or change the user account that Splunk runs as through the services menu. If you do change that then bear in mind it won't be able to access the same files you couldn't previously, you'd need to change all the folder and file permissions before restarting Splunk.

Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Defend at Machine Speed: Your Guide to Security Sessions at .conf26

Splunk .conf26   With threats moving at machine speed and attack surfaces expanding across hybrid ...

Where Innovation Takes Flight: The Splunk4Aviation Flight Sim Lands at .conf26

If you hear someone at .conf26 shouting "gear down, GEAR DOWN" across the show floor, you have found us.  The ...

Turn Cisco Telemetry Into Action with Cisco Data Fabric, powered by the Splunk ...

The surge in machine data is already hitting enterprise budgets, and the agentic era will only intensify it. ...