When I try to add port 162 UDP I cannot add it. I uninstalled Splunk, rebooted and reinstalled with no luck. Netstat -a shows Splunk listening but I cannot get data as it will not allow me to add the data source. Help please.
Are you running as root? You have to be running as root to listen on a port below 1024. See this topic in the Getting Data In manual.
How can I verify that. The user is a domain admin and should.
I am doing this simply from the Windows interfaces
Okay, just to confirm, then: does the user you are running Splunk Enterprise as have access to port 162?
