https://community.splunk.com/t5/Getting-Data-In/Why-am-I-unable-to-add-UDP-port-162-as-a-data-source/m-p/136098#M28020 <P>Are you running as root? You have to be running as root to listen on a port below 1024. See <A href="http://docs.splunk.com/Documentation/Splunk/6.2.0/Data/SyslogTCP">this topic in the Getting Data In manual</A>.</P> Wed, 26 Nov 2014 19:31:51 GMT ChrisG 2014-11-26T19:31:51Z https://community.splunk.com/t5/Getting-Data-In/Why-am-I-unable-to-add-UDP-port-162-as-a-data-source/m-p/136097#M28019 <P>When I try to add port 162 UDP I cannot add it. I uninstalled Splunk, rebooted and reinstalled with no luck. Netstat -a shows Splunk listening but I cannot get data as it will not allow me to add the data source. Help please.</P> Wed, 26 Nov 2014 19:02:27 GMT https://community.splunk.com/t5/Getting-Data-In/Why-am-I-unable-to-add-UDP-port-162-as-a-data-source/m-p/136097#M28019 rgrace110 2014-11-26T19:02:27Z https://community.splunk.com/t5/Getting-Data-In/Why-am-I-unable-to-add-UDP-port-162-as-a-data-source/m-p/136098#M28020 <P>Are you running as root? You have to be running as root to listen on a port below 1024. See <A href="http://docs.splunk.com/Documentation/Splunk/6.2.0/Data/SyslogTCP">this topic in the Getting Data In manual</A>.</P> Wed, 26 Nov 2014 19:31:51 GMT https://community.splunk.com/t5/Getting-Data-In/Why-am-I-unable-to-add-UDP-port-162-as-a-data-source/m-p/136098#M28020 ChrisG 2014-11-26T19:31:51Z https://community.splunk.com/t5/Getting-Data-In/Why-am-I-unable-to-add-UDP-port-162-as-a-data-source/m-p/136099#M28021 <P>I am doing this simply from the Windows interfaces</P> Wed, 26 Nov 2014 20:35:29 GMT https://community.splunk.com/t5/Getting-Data-In/Why-am-I-unable-to-add-UDP-port-162-as-a-data-source/m-p/136099#M28021 rgrace110 2014-11-26T20:35:29Z https://community.splunk.com/t5/Getting-Data-In/Why-am-I-unable-to-add-UDP-port-162-as-a-data-source/m-p/136100#M28022 <P>Okay, just to confirm, then: does the user you are running Splunk Enterprise as have access to port 162?</P> Wed, 26 Nov 2014 20:39:01 GMT https://community.splunk.com/t5/Getting-Data-In/Why-am-I-unable-to-add-UDP-port-162-as-a-data-source/m-p/136100#M28022 ChrisG 2014-11-26T20:39:01Z https://community.splunk.com/t5/Getting-Data-In/Why-am-I-unable-to-add-UDP-port-162-as-a-data-source/m-p/136101#M28023 <P>How can I verify that. The user is a domain admin and should.</P> Thu, 27 Nov 2014 14:22:45 GMT https://community.splunk.com/t5/Getting-Data-In/Why-am-I-unable-to-add-UDP-port-162-as-a-data-source/m-p/136101#M28023 rgrace110 2014-11-27T14:22:45Z