Getting Data In

Why am I unable to add UDP port 162 as a data source?

rgrace110
New Member

When I try to add port 162 UDP I cannot add it. I uninstalled Splunk, rebooted and reinstalled with no luck. Netstat -a shows Splunk listening but I cannot get data as it will not allow me to add the data source. Help please.

Tags (3)
0 Karma

ChrisG
Splunk Employee
Splunk Employee

Are you running as root? You have to be running as root to listen on a port below 1024. See this topic in the Getting Data In manual.

rgrace110
New Member

How can I verify that. The user is a domain admin and should.

0 Karma

rgrace110
New Member

I am doing this simply from the Windows interfaces

0 Karma

ChrisG
Splunk Employee
Splunk Employee

Okay, just to confirm, then: does the user you are running Splunk Enterprise as have access to port 162?

0 Karma
Get Updates on the Splunk Community!

Why You Can't Miss .conf25: Unleashing the Power of Agentic AI with Splunk & Cisco

The Defining Technology Movement of Our Lifetime The advent of agentic AI is arguably the defining technology ...

Deep Dive into Federated Analytics: Unlocking the Full Power of Your Security Data

In today’s complex digital landscape, security teams face increasing pressure to protect sprawling data across ...

Your summer travels continue with new course releases

Summer in the Northern hemisphere is in full swing, and is often a time to travel and explore. If your summer ...