https://community.splunk.com/t5/Getting-Data-In/Security-questions-about-how-Splunk-handles-session/m-p/507818#M86421 <P>Hi can you help with these security questions about how Splunk handles sessions? (Either On-Premise Enterprise Splunk or in Cloud)</P><P>We can't find anything about it in the Splunk Enterprise / Splunk Cloud documentation.</P><P>&nbsp;</P><P>What session management methodology is used (e.g. non-persistent cookies, session tokens stored in the database, by URL)? (Assume non-persistent cookies)</P><P><BR />How is the session token constructed (i.e. data elements)?</P><P><BR />What steps have been taken to ensure that it is effectively non-forgeable?</P><P>If encryption is used, provide algorithm and key length?</P><P><BR />Is a session table used to manage sessions?</P><P>If so, does it exist in memory on the web server, or is it stored further back in the system hierarchy?</P><P>Does it contain passwords (either plain text or encrypted)?</P><P>&nbsp;</P> Tue, 07 Jul 2020 12:24:45 GMT MCG_RasmusToelh 2020-07-07T12:24:45Z https://community.splunk.com/t5/Getting-Data-In/Security-questions-about-how-Splunk-handles-session/m-p/507818#M86421 <P>Hi can you help with these security questions about how Splunk handles sessions? (Either On-Premise Enterprise Splunk or in Cloud)</P><P>We can't find anything about it in the Splunk Enterprise / Splunk Cloud documentation.</P><P>&nbsp;</P><P>What session management methodology is used (e.g. non-persistent cookies, session tokens stored in the database, by URL)? (Assume non-persistent cookies)</P><P><BR />How is the session token constructed (i.e. data elements)?</P><P><BR />What steps have been taken to ensure that it is effectively non-forgeable?</P><P>If encryption is used, provide algorithm and key length?</P><P><BR />Is a session table used to manage sessions?</P><P>If so, does it exist in memory on the web server, or is it stored further back in the system hierarchy?</P><P>Does it contain passwords (either plain text or encrypted)?</P><P>&nbsp;</P> Tue, 07 Jul 2020 12:24:45 GMT https://community.splunk.com/t5/Getting-Data-In/Security-questions-about-how-Splunk-handles-session/m-p/507818#M86421 MCG_RasmusToelh 2020-07-07T12:24:45Z