SSH / SFTP
Connect a restricted remote folder using a verified server identity and read-only access.
Before you start
Ask the server administrator for a read-only SFTP account, its allowed root directory and the server's verified SHA256 host-key fingerprint. Obtain that fingerprint through a trusted channel, not just from an unexpected connection warning.
The source account needs read access to files and traversal access to the selected directories. It does not need administrator or unrestricted shell privileges.
Configure CogLake
- Choose Add connector → SSH / SFTP.
- Enter the host, port, username and remote root as visible to that account.
- Enter the verified SHA256 fingerprint.
- Choose password or private-key authentication. For key authentication, use the supported unencrypted PEM key in the secret field; never put it in a chat or shared note.
- Run Test connection.
- Select sync frequency, narrow the folder scope, assign CogLake role access and save.
- 1Verify server identity
- 2Test restricted access
- 3Choose folders and roles
- 4Save and synchronize
For a restricted/chroot account, the visible root may differ from the server administrator's filesystem path. Confirm it using that account. A private network destination also requires supported reachability from your CogLake installation.
Verify the import
Start with a small folder containing a supported document. Confirm the file in Knowledge Base and search. Later syncs should pick up changes to source files. Unsupported entries and symbolic links are not followed as ordinary documents.
Resolve failures safely
| Error | What to do |
|---|---|
| Host key missing or invalid | Recheck the fingerprint format with the server administrator |
| Host key mismatch | Stop and independently verify whether the server key changed |
| Authentication failed | Check username and password/key authorization |
| Private key invalid | Check the supported PEM format and that it is not passphrase-encrypted |
| Permission denied / path missing | Confirm the source root and account permissions |
| Timeout / unavailable | Check host, port and network reachability |
| Symbolic link / outside root | Select a real directory inside the permitted root |
Do not disable fingerprint verification to make a connection work. See connector troubleshooting for diagnostic and retry steps.