Knowledge Management

How are you protecting your forwarders for manipulation?

daniel333
Builder

all,

How are you protecting your UFs from manipulation from Redteam/Hacker activities?

0 Karma

starcher
Influencer

Some resources from an old conf talk here. https://github.com/MattUebel/splunk_UF_hardening

  1. Do not run as root
  2. Turn off rest api
  3. Change admin password
0 Karma
Get Updates on the Splunk Community!

Accelerating Observability as Code with the Splunk AI Assistant

We’ve seen in previous posts what Observability as Code (OaC) is and how it’s now essential for managing ...

Integrating Splunk Search API and Quarto to Create Reproducible Investigation ...

 Splunk is More Than Just the Web Console For Digital Forensics and Incident Response (DFIR) practitioners, ...

Congratulations to the 2025-2026 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...