Security

How can i add udp port 514 and 161 on the ./splunk?

cebo_myeza
Path Finder

I am using centos and i have opened the ports on the iptables but now if i try to add them on the ./splunk they give me the following messages:

root@localhost intern.network_trainee]# cd /opt/splunk/bin/

[root@localhost bin]# ./splunk add udp 514 -sourcetype syslog
In handler 'udp': Parameter name: UDP port 514 is not available.

[root@localhost bin]# ./splunk add udp 161 -sourcetype snmp
In handler 'udp': Parameter name: UDP port 161 is not available.

[root@localhost bin]#

And what confuses me the most is the $SPLUNK_HOME and /opt/spunk/ , is there a difference between the two directories?

0 Karma

MuS
Legend

Hi cebo_myeza,

exactly like answered here http://answers.splunk.com/answers/242650/how-to-allow-splunk-to-connect-udp-161-port-in-lin.html
Make sure the ports are not in use, also check any SELINUX settings.

cheers, MuS

cebo_myeza
Path Finder

in order to use ./splunk they say i must set environmental variables, like below

export SPLUNK_HOME=/opt/splunk
export PATH=$SPLUNK_HOME/bin:$PATH

Do i have to type this inside the setEnv file

0 Karma

MuS
Legend

You can use the file provided by Splunk like this:

source /opt/splunk/bin/setSplunkEnv
Get Updates on the Splunk Community!

Index This | What did the zero say to the eight?

June 2025 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with this month’s ...

Splunk Observability Cloud's AI Assistant in Action Series: Onboarding New Hires & ...

This is the fifth post in the Splunk Observability Cloud’s AI Assistant in Action series that digs into how to ...

Now Playing: Splunk Education Summer Learning Premieres

It’s premiere season, and Splunk Education is rolling out new releases you won’t want to miss. Whether you’re ...