Security

Community Activity

KEYCLOAK SAML issue I've configured my splunk enterprise to get saml login with keycloak.[authentication]authSettings = samlauthType = SA... by Araton71 Loves-to-Learn in Security a week ago 0 1	0	1
How can we exclude the local admin account from DUO MFA? We are currently configuring the DUO security MFA on Splunk Enterprise and we noticed that the local account admin ge... by javier_oshiro Explorer in Security 2 weeks ago 0 1	0	1
Set Httponly tag for splunkweb_uid Referring to this question (Not all Splunk cookies have the HttpOnly tag set) , answered by @anaidu_splunk , I can s... by Khairul_Irsyad Loves-to-Learn in Security 3 weeks ago 0 1	0	1
Any update on STIG guidance for current Splunk versions? Hello,I’m a Splunk admin supporting a government environment. We’ve historically used both the STIGs and the SRGs to ... by aoliver Engager in Security 04-02-2026 1 1	1	1
Splunk > from a security point of view Hello, Fresh out of college with a Cyber Security degree, I'm relatively new to the field. We recently purchased a ... by eafitt Path Finder in Security 03-30-2026 0 4	0	4
Search head's authentication credentials rejected by peer. I've re-added peers 4 times and this keeps happening! We've migrated some search heads, i've deleted the indexer peers, readded the cluster masters and everything looks fi... by gozulin Communicator in Security 03-25-2026 2 19	2	19
AI Toolkit "Connection Management is not yet configured by your Admin" I have a local Splunk Enterprise with free license. I'm trying to connect AI Toolkit with my GPT token, but returns t... by nonno_pinto Explorer in Security 03-24-2026 0 7	0	7
How do I log in if I get "No users exist" error message? I'm an admin and I installed Splunk without an admin password. It’s now saying that "No users exist" and no one can l... by tchimento_splun Splunk Employee in Security 02-01-2026 0 3	0	3
Replace root CA for Splunk cluster We have a Splunk cluster running which consists of search heads, indexers, heavy forwarders and other Splunk instance... by HumanPrinter Explorer in Security 01-25-2026 1 5	1	5
JOIN two log files from the same source path Refer below SPL query which I am using to get the UserId count against the server Instance. index=test_uat source=*/D... by shashankk Communicator in Security 01-21-2026 0 2	0	2
Splunking OpenVPN Server Logs Hi All I've started ingest OpenVPN server logs. I've done a preliminary search on apps, answers and the Net at large... by sajbutler Path Finder in Security 01-12-2026 1 6	1	6
Why does enabling Duo in Splunk break local admin login and is there a way around that? I'm on the 6.5.2 release and I have Duo turned on in the Splunk configs. It has been working great, but I just found ... by wrangler2x Motivator in Security 01-06-2026 2 3	2	3
How does DUO authentication for SPLUNK work? WE performed a test this morning with DUO\SPLUNK and it worked fine, however it also forced our local splunk accounts... by pfabrizi Path Finder in Security 01-06-2026 1 4	1	4
Splunk choropleth world map not working I am trying to setup Splunk choropleth world map for the first time.Refer below splunk query:index=app_events_test so... by shashankk Communicator in Security 12-20-2025 0 3	0	3
How do I get the desired result by expanding the wildcard? Hello,I am trying to replace the wildcard in my field by several specific workloads. I worked on a query using the mv... by chinmay25 Path Finder in Security 12-12-2025 0 7	0	7
Help To recover Pass4SymmKey Hi , i have a indexer cluster of 3 indexers and 2 search heads are in a cluster and having the pass4symmkey. Which au... by Prakash493 Communicator in Security 12-08-2025 0 4	0	4
simple way for a splunk user to confirm certificate file completeness before giving it to admin i want to ask one detailed question as a normal user who interacts with splunk on a daily basis without touching deve... by imKaren New Member in Security 12-01-2025 0 1	0	1
dbxquery command: external search exited unexpectedly I am trying to integrate an Oracle database with Splunk using DB Connect. When I attempt to create an input in Data L... by ankit13 Observer in Security 11-26-2025 0 1	0	1
How Do I make sure to auto update the Splunk builder add on app. I would like to know how to ensure that the Splunk Builder Add-on app is automatically updated to the latest version.... by TestUser Loves-to-Learn Lots in Security 11-07-2025 0 1	0	1
use strings values as a variable to do stats index=myindex ( "Sign-up experience experiment not allowed" OR "Sign-up experience experiment allowed" OR "experimen... by gsbpp Explorer in Security 10-30-2025 0 3	0	3
Is it possible to configure Splunk to support HTTP Strict Transport Security (HSTS)? Hi, We have a requirement from our security team to have Splunk support HSTS feature. Can this be done? I have seen c... by amoldesai Explorer in Security 10-27-2025 1 3	1	3
Require guidance on jquery and python update Dear all, Can some one please review and clarify my doubts:In order to update the instance jquery 3.5 complaint and p... by AsmaF2025 Explorer in Security 10-13-2025 0 0	0	0
AWS Splunk Enterprise new EC2 instance login help NEED HELP: Not able to sign-in with default passwordOn 11OCT2025, I tried launching a brand new Splunk Enterprise v10... by bt2025 Explorer in Security 10-12-2025 0 6	0	6
Splunk Enterprise upgrade to 9.4.0 failing - failing to set permissions Hello, Attempting to upgrade our test environment from 9.3.2 to 9.4.0 on Windows Server 2019 fails with the followi... by MMershon Explorer in Security 10-02-2025 1 1	1	1
Has anyone encountered this error: Asset and Identity Management issue? Has anyone encountered this issue and how did you fixed it on Splunkcloud and Enterprise Security "Identity: An error... by Paaattt Explorer in Security 10-02-2025 1 7	1	7