While testing a new bundle I got this error message when the Windows version of the Preview restarted:
Checking index files
An unforeseen error occurred:
Exception: <type 'exceptions.IOError'>, Value: [Errno 13] Permission denied: 'c:\\Program Files\\SplunkPreview\\var\\lib\\splunk\\defaultdb\\db\\db-hot\\rawdata\\10486464.gz'
The 10486464.gz file did not have an owner or security permissions assigned to it.
To get splunk to run I gave local administrators ownership of the file and assigned full control to the rawdata folder and replaced permission entries on all child objects.