Security

Is it possible to lock a Splunk user account on failed logins?

sc0tt
Builder

Is it possible to lock a Splunk user account if there are multiple failed login attempts? I've created an alert for such events, but was wondering if there was a way to lock an account as well.

Tags (4)
0 Karma

m4him7
Path Finder

We use LDAP lookup which will lock the domain account based on your policy.

khyoung7410
Communicator

Is there any other way besides LDAP?

0 Karma

sc0tt
Builder

Thanks, we don't have LDAP set up but it seems it may be the only way to accomplish this.

0 Karma
Get Updates on the Splunk Community!

New Case Study Shows the Value of Partnering with Splunk Academic Alliance

The University of Nevada, Las Vegas (UNLV) is another premier research institution helping to shape the next ...

How to Monitor Google Kubernetes Engine (GKE)

We’ve looked at how to integrate Kubernetes environments with Splunk Observability Cloud, but what about ...

Index This | How can you make 45 using only 4?

October 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with this ...