topic Re: Splunk Light - Cannot add data in Splunk Enterprise

Splunk Light - Cannot add data

1barrykemble — Sun, 10 Apr 2016 22:00:07 GMT

Hi,

I have followed the installation and configuration guide to get Splunk Light working and now I am at the point of adding a data source.

I get the same generic messsage (see screenshot) when I try to add a forwarder or setup syslog via the Monitor button.

There a lot of posts around about roles but as this is Splunk Light you only have the admin role to work with.

Am I missing something obvious?

Thanks,

Re: Splunk Light - Cannot add data

andrewb_splunk — Mon, 11 Apr 2016 16:07:48 GMT

Based on the error message, this does seem to be a matter of your role not having the necessary permissions to add data to the instance. Sorry if this is a basic question, but are you sure you are using Splunk Light? The screen shot appears to be Splunk Enterprise.

Re: Splunk Light - Cannot add data

ChrisG — Mon, 11 Apr 2016 16:11:27 GMT

From your screen shot, it does not look as if you are using Splunk Light. At the upper left corner, you should see a Splunk Light logo in orange. Is it possible you have an Enterprise trial or free license active?

Re: Splunk Light - Cannot add data

1barrykemble — Mon, 11 Apr 2016 21:07:25 GMT

Yes that does look like the full Package, I will deploy again and see what happens.

Thanks,

Barry.