topic How do I add data into Splunk when logged in as an administrator? in Getting Data In

How do I add data into Splunk when logged in as an administrator?

swarnendu30 — Thu, 17 Nov 2016 10:23:27 GMT

When i am adding data on Splunk Enterprise, I see:

You do not have the capability to add data. Please contact your administrator.

But I am logged in as an administrator user.

How do I add data into Splunk?

Re: How do I add data into Splunk when logged in as an administrator?

cmerriman — Thu, 17 Nov 2016 13:00:50 GMT

http://docs.splunk.com/Documentation/Splunk/6.5.0/Data/Getstartedwithgettingdatain

have you looked through this doc to get data into Splunk? There are multiple ways. Are you doing this through the GUI or through .conf files?

Re: How do I add data into Splunk when logged in as an administrator?

rodrigorsilva — Thu, 17 Nov 2016 13:14:11 GMT

Hi,

A simple way for a first contact:

http://docs.splunk.com/Documentation/Splunk/6.5.0/Data/Howdoyouwanttoadddata

For other options, you can try to do this:

http://docs.splunk.com/Documentation/Splunk/6.5.0/Data/Configureyourinputs

Tks

Rodrigo Ribeiro

Re: How do I add data into Splunk when logged in as an administrator?

davidpaper — Wed, 08 Feb 2017 17:50:28 GMT

You must have indexing disabled on that server (maybe a forwarder)? Either re-enable indexing on that instance, or try to create the data input on a Splunk instance that has indexing enabled.

Re: How do I add data into Splunk when logged in as an administrator?

aaraneta_splunk — Sat, 11 Mar 2017 18:19:46 GMT

@swarnendu30 - Looks like you have a few possible solutions to your question. If one of them provided a working solution, please don't forget to click "Accept" below the best answer to resolve this post. If you still need help, please leave a comment. Don’t forget to upvote anything that was helpful too. Thanks!