Getting Data In

How do I add data into Splunk when logged in as an administrator?

swarnendu30
New Member

When i am adding data on Splunk Enterprise, I see:

You do not have the capability to add data. Please contact your administrator. 

But I am logged in as an administrator user.

How do I add data into Splunk?

0 Karma

aaraneta_splunk
Splunk Employee
Splunk Employee

@swarnendu30 - Looks like you have a few possible solutions to your question. If one of them provided a working solution, please don't forget to click "Accept" below the best answer to resolve this post. If you still need help, please leave a comment. Don’t forget to upvote anything that was helpful too. Thanks!

0 Karma

davidpaper
Contributor

You must have indexing disabled on that server (maybe a forwarder)? Either re-enable indexing on that instance, or try to create the data input on a Splunk instance that has indexing enabled.

0 Karma

rodrigorsilva
Communicator

Hi,

A simple way for a first contact:

http://docs.splunk.com/Documentation/Splunk/6.5.0/Data/Howdoyouwanttoadddata

For other options, you can try to do this:

http://docs.splunk.com/Documentation/Splunk/6.5.0/Data/Configureyourinputs

Tks

Rodrigo Ribeiro

0 Karma

cmerriman
Super Champion

http://docs.splunk.com/Documentation/Splunk/6.5.0/Data/Getstartedwithgettingdatain

have you looked through this doc to get data into Splunk? There are multiple ways. Are you doing this through the GUI or through .conf files?

0 Karma
Get Updates on the Splunk Community!

.conf24 | Registration Open!

Hello, hello! I come bearing good news: Registration for .conf24 is now open!   conf is Splunk’s rad annual ...

Splunk is officially part of Cisco

Revolutionizing how our customers build resilience across their entire digital footprint.   Splunk ...

Splunk APM & RUM | Planned Maintenance March 26 - March 28, 2024

There will be planned maintenance for Splunk APM and RUM between March 26, 2024 and March 28, 2024 as ...