Hi @Jaki001, you have to check the read permissions on the file to read for group and others, in this way you will know if the user you're using to run Splunk is enabled to read the files, if not, you have three ways: to change the user you're using to run Splunk (I don't like this solution but it's the easier), to change the group of the user you're using to run Splunkadding the same group of the files to read, to change the rights on the files adding read grants (4) to others. Ciao. Giuseppe ... View more

A new question opened. ... View more