Security

Community Activity

Heartbleed/openssl and Splunk Seeing as Splunk is deployed with its own bundled openssl binary and libs, and seeing as compromise of the issue (CVE... by grijhwani Motivator in Security 04-11-2014 7 11	7	11
Differences in splunk documentation Hi, We use splunk's scripted authentication mechanism in our product. Initially we set the cachetiming to 1s. Since ... by strive Influencer in Security 04-11-2014 2 2	2	2
Splunk Java Api connect with SSO I have to create a java application that can fetch results from splunk searches. I am able to do it easily with my lo... by pranay036 Engager in Security 04-11-2014 1 1	1	1
OpenSSL security bug Splunk 6.0.2 is linked against OpenSSL 1.0.1e which has serious security flaw (CVE-2014-0160). When will be Splunk wi... by mpavlas Explorer in Security 04-11-2014 4 14	4	14
Index Volume, Licence Use Question I am using this search to find volume for systems reporting to one index index="_internal" source="*metrics.log" per... by hartfoml Motivator in Security 04-08-2014 0 10	0	10
Hardening: \en-US\Modules Adding this to the end of my SPlunk URl allows standard users to see all the modules loaded. I do not want the end u... by rogerroger New Member in Security 04-07-2014 0 1	0	1
Find top IPs by # of unique ports attempted scan in FW logs Hi, another newbie question here. I am analyzing firewall logs in this format: Apr 4 22:03:18 10.20.10.1 Apr 4 22... by kevinlong206 New Member in Security 04-05-2014 0 1	0	1
LDAP Size Limit Hi all, I know this has been covered before here, but I'm still struggling with it. How do we tell Splunk to return... by maciep Champion in Security 04-02-2014 3 9	3	9
What are the security risks of giving users write access to the search app? I have a user that wants to make some of their shared searches available to others. I've discovered that I have to gi... by vqd361 Path Finder in Security 04-01-2014 0 1	0	1
Authorize.conf filtering indexes I would like to restrict some indexes from certain role. I can modify the srchFiler in authorize.conf to exclude 1 i... by rmorlen Splunk Employee in Security 04-01-2014 0 3	0	3
Can I edit authentication.conf via rest? Can I edit the roleMap stanzas via the rest API? by juniormint Communicator in Security 03-28-2014 0 1	0	1
grabbing IP from ssh auth log Hi there, new to splunk. I have some records that take two different forms (both denote ssh login failed). I want to... by kevinlong206 New Member in Security 03-28-2014 0 1	0	1
mapping users to role Hi, I have created LDAP configuration in our SPLUNK deployment. Version 6.0 DO NOT EDIT THIS FILE! Please make al... by romitsn New Member in Security 03-27-2014 0 4	0	4
Hunk Reports an Error with Apache Hadoop When running queries against a VIX backed by an instance of apache hadoop, my searches would raise the following erro... by jgreenleaf Explorer in Security 03-26-2014 1 6	1	6
AD / LDAP Authentication Limit issues Hi. I've managed to get my Splunk (5.0.latest) referring to my Active Directory Domain Controllers to allow a number... by Vtesse Engager in Security 03-25-2014 0 6	0	6
splunk web url restriction Hi, I want to restrict my splunk web url from being access to the outer world. Splunk web should be accessible by onl... by abhayneilam Contributor in Security 03-24-2014 0 2	0	2
SPLUNKD_CONNECTION_TIMEOUT 6.x In previous versions of splunk, we have overridden the SPLUNKD_CONNECTION_TIMEOUT value in the __init__.py file due t... by RicoSuave Builder in Security 03-21-2014 1 1	1	1
Does Splunk support TSL 1.2 ? I started to hear that people in government related business are looking for TSL 1.2 support for SSL. I know many sof... by Masa Splunk Employee in Security 03-18-2014 4 2	4	2
Create new role with almost admin capabilities The word "admin" is anathema to our IA people. As a result, even though I am the only Splunk developer, I am not perm... by kmattern Builder in Security 03-18-2014 0 5	0	5
correlate two sources when event from source A happens in between 2 events on source B VPN session Hi, I am trying to see when an event happens on source=A in between 2 events on source=VPN. My VPN source provides t... by bcusick Communicator in Security 03-17-2014 0 2	0	2
SSO sometimes fails with "deeper" URLs Hello, I am trying to troubleshoot an SSO issue with "deep" URLs. SSO is configured with a reverse proxy which handl... by wsw70 Communicator in Security 03-17-2014 1 3	1	3
Reverse Proxy not working configuration even with expected config Hi all, I finally decided to post and get help from here to deal with Splunk configuration behind a reverse Proxy. ... by guilmxm Influencer in Security 03-16-2014 0 5	0	5
Can I do role Mapping in my app? I am wondering if I can provide LDAP role to user group mappings in my app folder (etc/apps/MyApp/local/authenticatio... by juniormint Communicator in Security 03-14-2014 0 4	0	4
How many users can access a dashboard Hi Guys, I have a very basic question.I designed a dashboard it extracts data from Oracle database , now client is as... by vikas_gopal Builder in Security 03-14-2014 0 9	0	9
LDAP authentication with AD always returns: ERROR ScopedLDAPConnection - Search for DN 'dc=xyz,dc=net' gave error: Operations error My authentication and role mapping seem to be working fine, but I see many of these errors in the splunkd log (one fo... by hughkelley Path Finder in Security 03-13-2014 1 3	1	3