https://community.splunk.com/t5/Getting-Data-In/New-and-started-to-input-data/m-p/228253#M98974 <P>Splunk does not care what port you want to monitor - it can be anything. However, Splunk may be restricted because you are running Splunk from a non-privileged account (as you should).</P> <P>On Linux for example, ports under 1024 are considered privileged; a non- root user cannot read these ports. This may be why you can't monitor port 80. There are ways to get around this.</P> <P>I am also concerned when you say "monitor port 80 for traffic." Splunk's network inputs (TCP and UDP) read data from the port and index it; is this what you mean by "monitoring"? I feel like this is not what you want. You might also want to look at the free <A href="http://splunkbase.splunk.com/app/1809/">Splunk App for Stream</A></P> Sat, 13 Aug 2016 05:06:25 GMT lguinn2 2016-08-13T05:06:25Z https://community.splunk.com/t5/Getting-Data-In/New-and-started-to-input-data/m-p/228252#M98973 <P>So this is the first time I was trying to input the TCP data port to my monitoring. I am behind a NAT as it is with a FioS router in a home network environment. I wanted to monitor port 80 for web but that is not being allowed (I presume it has to do with the NAT). How do I monitor my computer as a test for traffic going/coming from the web on the Splunk monitoring tool? What settings/port numbers do I need as the input data?</P> Fri, 12 Aug 2016 23:38:39 GMT https://community.splunk.com/t5/Getting-Data-In/New-and-started-to-input-data/m-p/228252#M98973 dxw350 2016-08-12T23:38:39Z https://community.splunk.com/t5/Getting-Data-In/New-and-started-to-input-data/m-p/228253#M98974 <P>Splunk does not care what port you want to monitor - it can be anything. However, Splunk may be restricted because you are running Splunk from a non-privileged account (as you should).</P> <P>On Linux for example, ports under 1024 are considered privileged; a non- root user cannot read these ports. This may be why you can't monitor port 80. There are ways to get around this.</P> <P>I am also concerned when you say "monitor port 80 for traffic." Splunk's network inputs (TCP and UDP) read data from the port and index it; is this what you mean by "monitoring"? I feel like this is not what you want. You might also want to look at the free <A href="http://splunkbase.splunk.com/app/1809/">Splunk App for Stream</A></P> Sat, 13 Aug 2016 05:06:25 GMT https://community.splunk.com/t5/Getting-Data-In/New-and-started-to-input-data/m-p/228253#M98974 lguinn2 2016-08-13T05:06:25Z