https://community.splunk.com/t5/Getting-Data-In/Broken-Pipe-issues-when-adding-new-data-source-to-Splunk-from/m-p/156431#M31714 <P>Customer reports that when trying to upload a local file to Splunk (Add Data -&gt; From files and directories -&gt; Upload and index a file -&gt; Save), Splunk reports "Success! Your data is being indexed to Splunk". However, the uploaded file is not available at the selected index. At the server side, i see this log entry at the second when clicking "Save": </P> <P>splunkd.log<BR /> WARN HttpListener - Socket error from 127.0.0.1 while accessing /services/receivers/stream: Broken pipe </P> Wed, 19 Feb 2014 09:09:02 GMT dshakespeare_sp 2014-02-19T09:09:02Z https://community.splunk.com/t5/Getting-Data-In/Broken-Pipe-issues-when-adding-new-data-source-to-Splunk-from/m-p/156431#M31714 <P>Customer reports that when trying to upload a local file to Splunk (Add Data -&gt; From files and directories -&gt; Upload and index a file -&gt; Save), Splunk reports "Success! Your data is being indexed to Splunk". However, the uploaded file is not available at the selected index. At the server side, i see this log entry at the second when clicking "Save": </P> <P>splunkd.log<BR /> WARN HttpListener - Socket error from 127.0.0.1 while accessing /services/receivers/stream: Broken pipe </P> Wed, 19 Feb 2014 09:09:02 GMT https://community.splunk.com/t5/Getting-Data-In/Broken-Pipe-issues-when-adding-new-data-source-to-Splunk-from/m-p/156431#M31714 dshakespeare_sp 2014-02-19T09:09:02Z https://community.splunk.com/t5/Getting-Data-In/Broken-Pipe-issues-when-adding-new-data-source-to-Splunk-from/m-p/156432#M31715 <P>The issue was seen for non admin users that tried to add data to Splunk. By adding the "edit_tcp" capability to the users role, the error disappeared and uploaded data gets indexed. </P> Wed, 19 Feb 2014 09:24:38 GMT https://community.splunk.com/t5/Getting-Data-In/Broken-Pipe-issues-when-adding-new-data-source-to-Splunk-from/m-p/156432#M31715 dshakespeare_sp 2014-02-19T09:24:38Z