Security

How can i add udp port 514 and 161 on the ./splunk?

cebo_myeza
Path Finder

I am using centos and i have opened the ports on the iptables but now if i try to add them on the ./splunk they give me the following messages:

root@localhost intern.network_trainee]# cd /opt/splunk/bin/

[root@localhost bin]# ./splunk add udp 514 -sourcetype syslog
In handler 'udp': Parameter name: UDP port 514 is not available.

[root@localhost bin]# ./splunk add udp 161 -sourcetype snmp
In handler 'udp': Parameter name: UDP port 161 is not available.

[root@localhost bin]#

And what confuses me the most is the $SPLUNK_HOME and /opt/spunk/ , is there a difference between the two directories?

0 Karma

MuS
SplunkTrust
SplunkTrust

Hi cebo_myeza,

exactly like answered here http://answers.splunk.com/answers/242650/how-to-allow-splunk-to-connect-udp-161-port-in-lin.html
Make sure the ports are not in use, also check any SELINUX settings.

cheers, MuS

cebo_myeza
Path Finder

in order to use ./splunk they say i must set environmental variables, like below

export SPLUNK_HOME=/opt/splunk
export PATH=$SPLUNK_HOME/bin:$PATH

Do i have to type this inside the setEnv file

0 Karma

MuS
SplunkTrust
SplunkTrust

You can use the file provided by Splunk like this:

source /opt/splunk/bin/setSplunkEnv
Get Updates on the Splunk Community!

Index This | What’s a riddle wrapped in an enigma?

September 2025 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with this ...

BORE at .conf25

Boss Of Regular Expression (BORE) was an interactive session run again this year at .conf25 by the brilliant ...

OpenTelemetry for Legacy Apps? Yes, You Can!

This article is a follow-up to my previous article posted on the OpenTelemetry Blog, "Your Critical Legacy App ...