Getting Data In

How do I add data into Splunk when logged in as an administrator?

New Member

When i am adding data on Splunk Enterprise, I see:

You do not have the capability to add data. Please contact your administrator. 

But I am logged in as an administrator user.

How do I add data into Splunk?

0 Karma

Splunk Employee
Splunk Employee

@swarnendu30 - Looks like you have a few possible solutions to your question. If one of them provided a working solution, please don't forget to click "Accept" below the best answer to resolve this post. If you still need help, please leave a comment. Don’t forget to upvote anything that was helpful too. Thanks!

0 Karma


You must have indexing disabled on that server (maybe a forwarder)? Either re-enable indexing on that instance, or try to create the data input on a Splunk instance that has indexing enabled.

0 Karma



A simple way for a first contact:

For other options, you can try to do this:


Rodrigo Ribeiro

0 Karma

Super Champion

have you looked through this doc to get data into Splunk? There are multiple ways. Are you doing this through the GUI or through .conf files?

0 Karma
Get Updates on the Splunk Community!

Admin Your Splunk Cloud, Your Way

Join us to maximize different techniques to best tune Splunk Cloud. In this Tech Enablement, you will get ...

Cloud Platform | Discontinuing support for TLS version 1.0 and 1.1

Overview Transport Layer Security (TLS) is a security communications protocol that lets two computers, ...

New Customer Testimonials

Enterprises of all sizes and across different industries are accelerating cloud adoption by migrating ...