I have an NFS mount to an AIX server that I am trying to read logs on a flex connector. The NFS mounts correctly, the ArcSight user can read the log files when I an logged in as user ArcSight, but the connector cannot access the folder when I add the folder to the sdkrfilereader connector properties.
The connector is a 6.4.0 appliance and the agent version is 6.0.5. The NFS mount has been created for for user 1500 (arcsight), but the folder mounted is not owned by user 1500 or group 750 on the remote side, it is owned by user 200 and group 500. User 1500 has been added to the remote server's group 500 for read permissions, and locally I created group 500 and added user arcsight to said group so the local system would allow read permissions (this worked.) When I try to add the folder to the flex connector I am getting a "error [0:Folder [/opt/mnt/xxx] does not have permissions to read the files" error. I tried adding root to group 500 as well, but no luck.
I found KM1305020 on HP's support site which lists steps towards mounting a folder on AIX:
1. The AIX sysadmin must create an NFS mount to the complete target folder. ( i.e. /log/folderA/folderB/folderC )
2. The arcsight user and arcsight group must be created and must have UID 1500 and GID 750 at that target server log to manage.
3. Sysadmin creates a softlink Inside /home/arcsight to the target folder. (You need root ID on that) .(i.e. /log/folderA/folderB/folderC)
After this is completed, you will see that the file names are abc@ (AIX uses the @ sign to signal a softlink.)
4. Create the mount as normal on the Connector Appliance. Your remote path will be /home/arcsight/abc. (No alias needed in the Appliance setup).
We changed the NFS to this format, but the container still cannot access the share (user ArcSight can.)
Any help would be appreciated.
Before i get into the logic of your problem i would first advice you to upgrade to the latest smartconnector (6. is way too old).