https://community.splunk.com/t5/Getting-Data-In/Get-data-from-forward-TCP-and-UDP-ports/m-p/580789#M102437 <P>If you are using port less or equal than 1024 then you must run splunkd as root, which is not as best practices. I prefer to use e.g. port 1514 or similar for that.&nbsp;</P><P>Have you update also your senders to use that unstandardised port (normally udp + 514) to use?</P><P>r. Ismo</P> Wed, 12 Jan 2022 14:22:14 GMT isoutamo 2022-01-12T14:22:14Z https://community.splunk.com/t5/Getting-Data-In/Get-data-from-forward-TCP-and-UDP-ports/m-p/580786#M102436 <P>Not getting data ofter configuring TCP 80 port in inputs.conf</P><P>my stanza is like this</P><P>[tcp://80]<BR />connection_host = dns<BR />index = port<BR />sourcetype = syslog</P><P>can you give me any idea on this. thnks in advance.</P> Wed, 12 Jan 2022 14:00:40 GMT https://community.splunk.com/t5/Getting-Data-In/Get-data-from-forward-TCP-and-UDP-ports/m-p/580786#M102436 king311 2022-01-12T14:00:40Z https://community.splunk.com/t5/Getting-Data-In/Get-data-from-forward-TCP-and-UDP-ports/m-p/580789#M102437 <P>If you are using port less or equal than 1024 then you must run splunkd as root, which is not as best practices. I prefer to use e.g. port 1514 or similar for that.&nbsp;</P><P>Have you update also your senders to use that unstandardised port (normally udp + 514) to use?</P><P>r. Ismo</P> Wed, 12 Jan 2022 14:22:14 GMT https://community.splunk.com/t5/Getting-Data-In/Get-data-from-forward-TCP-and-UDP-ports/m-p/580789#M102437 isoutamo 2022-01-12T14:22:14Z