Getting Data In

Why am I unable to add UDP port 162 as a data source?

rgrace110
New Member

When I try to add port 162 UDP I cannot add it. I uninstalled Splunk, rebooted and reinstalled with no luck. Netstat -a shows Splunk listening but I cannot get data as it will not allow me to add the data source. Help please.

Tags (3)
0 Karma

ChrisG
Splunk Employee
Splunk Employee

Are you running as root? You have to be running as root to listen on a port below 1024. See this topic in the Getting Data In manual.

rgrace110
New Member

How can I verify that. The user is a domain admin and should.

0 Karma

rgrace110
New Member

I am doing this simply from the Windows interfaces

0 Karma

ChrisG
Splunk Employee
Splunk Employee

Okay, just to confirm, then: does the user you are running Splunk Enterprise as have access to port 162?

0 Karma
Get Updates on the Splunk Community!

Index This | How many sides does a circle have?

  March 2025 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with this ...

New This Month - Splunk Observability updates and improvements for faster ...

What’s New? This month, we’re delivering several enhancements across Splunk Observability Cloud for faster and ...

What's New in Splunk Cloud Platform 9.3.2411?

Hey Splunky People! We are excited to share the latest updates in Splunk Cloud Platform 9.3.2411. This release ...