I am running Splunk in Docker on my local machine. I would like to monitor a directory folder also on my local machine where data will be posted (csv files which I would like to index).
I go to:
If I use Browse, I can't find my directory - assume as it isn't mounted.
If I add the path to the folder, I get an error saying "This path does not exist or is not accessible."
It seems it should be easy to add a folder for monitoring - as yet I can't find a way to do it.
Can anyone point me in the right direction?
Many thanks in advance.
NM
This seems like a Docker problem(?) not a Splunk problem - you need to set up your Docker instance to have access to your local machine file system. Given that the essence of Docker is containment, this sounds like a non-trivial task!
Other way to go around the problem would be to install UF in the "main" system and forward events read by UF into the dockerized Splunk instance.
That depends on how your non-Docker environment is set up. I use WSL on my PC which automatically mounts the C drive under /mnt and is therefore easy to find.