Security

Community Activity

Index Volume, Licence Use Question I am using this search to find volume for systems reporting to one index index="_internal" source="*metrics.log" per... by hartfoml Motivator in Security 04-08-2014 0 10	0	10
Hardening: \en-US\Modules Adding this to the end of my SPlunk URl allows standard users to see all the modules loaded. I do not want the end u... by rogerroger New Member in Security 04-07-2014 0 1	0	1
Find top IPs by # of unique ports attempted scan in FW logs Hi, another newbie question here. I am analyzing firewall logs in this format: Apr 4 22:03:18 10.20.10.1 Apr 4 22... by kevinlong206 New Member in Security 04-05-2014 0 1	0	1
LDAP Size Limit Hi all, I know this has been covered before here, but I'm still struggling with it. How do we tell Splunk to return... by maciep Champion in Security 04-02-2014 3 9	3	9
What are the security risks of giving users write access to the search app? I have a user that wants to make some of their shared searches available to others. I've discovered that I have to gi... by vqd361 Path Finder in Security 04-01-2014 0 1	0	1
Authorize.conf filtering indexes I would like to restrict some indexes from certain role. I can modify the srchFiler in authorize.conf to exclude 1 i... by rmorlen Splunk Employee in Security 04-01-2014 0 3	0	3
Can I edit authentication.conf via rest? Can I edit the roleMap stanzas via the rest API? by juniormint Communicator in Security 03-28-2014 0 1	0	1
grabbing IP from ssh auth log Hi there, new to splunk. I have some records that take two different forms (both denote ssh login failed). I want to... by kevinlong206 New Member in Security 03-28-2014 0 1	0	1
mapping users to role Hi, I have created LDAP configuration in our SPLUNK deployment. Version 6.0 DO NOT EDIT THIS FILE! Please make al... by romitsn New Member in Security 03-27-2014 0 4	0	4
Hunk Reports an Error with Apache Hadoop When running queries against a VIX backed by an instance of apache hadoop, my searches would raise the following erro... by jgreenleaf Explorer in Security 03-26-2014 1 6	1	6
AD / LDAP Authentication Limit issues Hi. I've managed to get my Splunk (5.0.latest) referring to my Active Directory Domain Controllers to allow a number... by Vtesse Engager in Security 03-25-2014 0 6	0	6
splunk web url restriction Hi, I want to restrict my splunk web url from being access to the outer world. Splunk web should be accessible by onl... by abhayneilam Contributor in Security 03-24-2014 0 2	0	2
SPLUNKD_CONNECTION_TIMEOUT 6.x In previous versions of splunk, we have overridden the SPLUNKD_CONNECTION_TIMEOUT value in the __init__.py file due t... by RicoSuave Builder in Security 03-21-2014 1 1	1	1
Does Splunk support TSL 1.2 ? I started to hear that people in government related business are looking for TSL 1.2 support for SSL. I know many sof... by Masa Splunk Employee in Security 03-18-2014 4 2	4	2
Create new role with almost admin capabilities The word "admin" is anathema to our IA people. As a result, even though I am the only Splunk developer, I am not perm... by kmattern Builder in Security 03-18-2014 0 5	0	5
correlate two sources when event from source A happens in between 2 events on source B VPN session Hi, I am trying to see when an event happens on source=A in between 2 events on source=VPN. My VPN source provides t... by bcusick Communicator in Security 03-17-2014 0 2	0	2
SSO sometimes fails with "deeper" URLs Hello, I am trying to troubleshoot an SSO issue with "deep" URLs. SSO is configured with a reverse proxy which handl... by wsw70 Communicator in Security 03-17-2014 1 3	1	3
Reverse Proxy not working configuration even with expected config Hi all, I finally decided to post and get help from here to deal with Splunk configuration behind a reverse Proxy. ... by guilmxm Influencer in Security 03-16-2014 0 5	0	5
Can I do role Mapping in my app? I am wondering if I can provide LDAP role to user group mappings in my app folder (etc/apps/MyApp/local/authenticatio... by juniormint Communicator in Security 03-14-2014 0 4	0	4
How many users can access a dashboard Hi Guys, I have a very basic question.I designed a dashboard it extracts data from Oracle database , now client is as... by vikas_gopal Builder in Security 03-14-2014 0 9	0	9
LDAP authentication with AD always returns: ERROR ScopedLDAPConnection - Search for DN 'dc=xyz,dc=net' gave error: Operations error My authentication and role mapping seem to be working fine, but I see many of these errors in the splunkd log (one fo... by hughkelley Path Finder in Security 03-13-2014 1 3	1	3
Splunk _internal call to give multiple values to a parameter Hi, I make use of _internal call to add users to the splunk as follows. /opt/splunk/bin/splunk _internal call /servi... by premg Engager in Security 03-13-2014 0 3	0	3
User authentication to multiple AD domains in Splunk Is it possible to configure Splunk so that one can choose which Active Directory to login in to? For example in the l... by joberget Path Finder in Security 03-12-2014 3 5	3	5
See count of license violations in last 30 days? We have had several license violations recently and I'm not certain how close we are to our 30-day limit. I'd like t... by mfrost8 Builder in Security 03-12-2014 0 10	0	10
Does Splunk Support ShA-256 or SHA -1? Does Splunk Support ShA-256 or is it backwards compatible with SHA -1? by allamiro Path Finder in Security 03-11-2014 0 2	0	2