Refine your search:

Fatal MetaData message re: sources.data in splunkd.log

3

I'm getting this error in splunkd.log on Windows 7

What does this mean and how can it be corrected?

08-15-2010 05:18:01.854 FATAL MetaData - failed to rename D:\SPLUNK\var\lib\splunk\defaultdb\db\Sources.data.temp to D:\SPLUNK\var\lib\splunk\defaultdb\db\Sources.data: Access is denied.

There is no Sources.data.temp file in the directory

asked 01 Sep '10, 22:37

Jaci's gravatar image

Jaci ♦
874●1●2●14
accept rate: 75%

edited 05 Sep '10, 19:54

Stephen%20Sorkin's gravatar image

Stephen Sorkin ♦
7.1k●4●7

1

I suspect a permissions issue.

When you login as the user that splunkd runs as and you attempt to create a new file in D:SPLUNKvarlibsplunkdefaultdb , do you get an error or are you prompted for the need to be admin to make the change?

(02 Sep '10, 00:19) hexx ♦
One Answer:
oldestnewestmost voted
0

Experiencing the same issue on win2003 x64. However there is such file and permissions are ok. Any ideas? Search over the problematic index is very slow.

link

answered 02 Jun '11, 07:10

Arseny's gravatar image

Arseny
11
accept rate: 0%

Post your answer
toggle preview

Copyright © 2005-2012 Splunk, Inc. All rights reserved.