Hi there! I was trying to access log files from a remote drive. After failing to index any content from the directory on the network, I then tried to run services "Splunkd" and "Splunkweb" as a user with the access to the remote drive. After restarting the services, I encountered following error while starting Splunk: IOError: [Errno 13] Permission denied: 'C:\Program Files\Splunk\var\run\splunk\session-a22699a0d534352c044d5ba6c1f30753cbe4bb71.lock' I have checked this thread: http://www.splunk.com/support/forum:SplunkGeneral/3163 while gkanapathy stated at last that "I will note that if you change the userid of the splunkweb and splunkd services, you will probably encounter a bunch of file permissions and access problems on the local Splunk installation (e.g., can't get to it's own program and config and temp files), and you'd have to go and change all those." I am wondering which exactly changes can be applied according to this scenario? Thanks a lot in advance. ... View more