Getting Data In

How do I add data into Splunk when logged in as an administrator?

swarnendu30
New Member

When i am adding data on Splunk Enterprise, I see:

You do not have the capability to add data. Please contact your administrator. 

But I am logged in as an administrator user.

How do I add data into Splunk?

0 Karma

aaraneta_splunk
Splunk Employee
Splunk Employee

@swarnendu30 - Looks like you have a few possible solutions to your question. If one of them provided a working solution, please don't forget to click "Accept" below the best answer to resolve this post. If you still need help, please leave a comment. Don’t forget to upvote anything that was helpful too. Thanks!

0 Karma

davidpaper
Contributor

You must have indexing disabled on that server (maybe a forwarder)? Either re-enable indexing on that instance, or try to create the data input on a Splunk instance that has indexing enabled.

0 Karma

rodrigorsilva
Communicator

Hi,

A simple way for a first contact:

http://docs.splunk.com/Documentation/Splunk/6.5.0/Data/Howdoyouwanttoadddata

For other options, you can try to do this:

http://docs.splunk.com/Documentation/Splunk/6.5.0/Data/Configureyourinputs

Tks

Rodrigo Ribeiro

0 Karma

cmerriman
Super Champion

http://docs.splunk.com/Documentation/Splunk/6.5.0/Data/Getstartedwithgettingdatain

have you looked through this doc to get data into Splunk? There are multiple ways. Are you doing this through the GUI or through .conf files?

0 Karma
Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...