Getting Data In

Why am I unable to add UDP port 162 as a data source?

rgrace110
New Member

When I try to add port 162 UDP I cannot add it. I uninstalled Splunk, rebooted and reinstalled with no luck. Netstat -a shows Splunk listening but I cannot get data as it will not allow me to add the data source. Help please.

Tags (3)
0 Karma

ChrisG
Splunk Employee
Splunk Employee

Are you running as root? You have to be running as root to listen on a port below 1024. See this topic in the Getting Data In manual.

rgrace110
New Member

How can I verify that. The user is a domain admin and should.

0 Karma

rgrace110
New Member

I am doing this simply from the Windows interfaces

0 Karma

ChrisG
Splunk Employee
Splunk Employee

Okay, just to confirm, then: does the user you are running Splunk Enterprise as have access to port 162?

0 Karma
Get Updates on the Splunk Community!

Say goodbye to manually analyzing phishing and malware threats with Splunk Attack ...

In today’s evolving threat landscape, we understand you’re constantly bombarded with phishing and malware ...

AppDynamics is now part of Splunk Ideas

Hello Splunkers, We have exciting news for you! AppDynamics has been added to the Splunk Ideas Portal. Which ...

Advanced Splunk Data Management Strategies

Join us on Wednesday, May 14, 2025, at 11 AM PDT / 2 PM EDT for an exclusive Tech Talk that delves into ...