Security

Community Activity

Malware Operations CIM, catering for multiple engines and pattern types Hi, I am currently adapting sourcetypes for Trend Micro Products to the the CIM, in order to use them with ES and th... by stephanbuys Path Finder in Security 11-05-2013 0 1	0	1
Fail: [HTTP 403] Client is not authorized to perform requested action; http://127.0.0.1:8089/servicesNS/wolverine/search/data/modular-inputs?count=1000 When a user clicks on their username (to change password or TZ locale, etc) they encounter the folllowing error: Fai... by the_wolverine Champion in Security 11-04-2013 0 1	0	1
How to identify the logged in user (into splunk web) from custom python script? I have a custom script in which I have to perform different actions based on the user who invoked it. The script is a... by soe_hlawin Explorer in Security 11-04-2013 0 1	0	1
Receiver inputs.conf Location Configuring Via Web GUI Splunk 5.0.5 Windows 7 I setup a receiver through Splunk Web. I'd like to add compression, but I'm having trouble lo... by sjwone Explorer in Security 10-31-2013 1 4	1	4
StatsProcessor - reached limit max_mem_usage_mb Hello, I have a deployment server with the Deployment Monitor app installed. We currently rely on the the "missing f... by bsizemore Path Finder in Security 10-30-2013 0 1	0	1
Splunk 6 Search dont have the "fields" src and dst as source and destination any more Hello! I think after upgrading to splunk 6, the fields "on the left side" dont have source and destination "mapped" ... by frodet New Member in Security 10-30-2013 0 1	0	1
df.sh showing permission denied error in internal log Hi.. I have the unix app installed in one of my linux server , and they are several mount points on this box , out o... by rakesh_498115 Motivator in Security 10-29-2013 0 1	0	1
Same Query different user with matching permissions does not return results When I run the below query as an admin it returns results however when run as a user it does not. The user is a power... by james_j_taylor Explorer in Security 10-25-2013 0 4	0	4
Is there a user count cap? Can Splunk handle 60k users? Scenario: Using external authentication via python scriptPython methods using ODBC to ... by andywins Explorer in Security 10-24-2013 1 1	1	1
Pass login id to query I am looking for the simplest way to pass the login name to a variable in a query. I want the $formMgrVZID$ to be the... by james_j_taylor Explorer in Security 10-24-2013 0 3	0	3
db connect to Vertica DB error I'm having trouble getting splunk dbx app connected to a vertica database. Other db's (netezza, composite, mysql, o... by splunkben Explorer in Security 10-22-2013 0 1	0	1
Savedsearches for a disabled user Hello, We had an employee leave the company. He had some important searches that seem to be bound to his account so... by daniel333 Builder in Security 10-22-2013 0 1	0	1
DBmon giving error Hello I have a DBconnect input which is working on one environment but its giving error in another environment. [db... by theouhuios Motivator in Security 10-21-2013 0 1	0	1
Linux failed login attempts Hi all, What is the search to find out the total failed login attempts in Linux? I donot want to use *nix app for th... by lohit Path Finder in Security 10-15-2013 0 1	0	1
Splunk SSL Input app not hashing password? Hello everyone. I have written an SSL input app using a 3rd party certificate that will be used to deploy on all of o... by msarro Builder in Security 10-11-2013 0 1	0	1
Problem with a user's ability to set permissions on a saved search I have created a role for a group of users for whom we are collecting their Windows Exchange logs and Windows events ... by wrangler2x Motivator in Security 10-10-2013 1 1	1	1
Apache Proxy - Splunk displays "waiting for data..." Hi all, my first post here - so hello to everyone! My Name is Philipp and I live in Munich/Germany Maybe you can he... by phwinkler Explorer in Security 10-09-2013 0 3	0	3
Splunk DB connect I have a firewall between my indexer and MySLQ DB. What port(s) does the indexer use to make connections and queries?... by ffrig New Member in Security 10-09-2013 0 6	0	6
About maxTotalDataSizeMB Hi! I would like to confirm which article is the correct explanation for maxTotalDataSizeMB. In http://docs.splunk.... by yuwtennis Communicator in Security 10-09-2013 1 2	1	2
Difference between Event hashing and IT block signing Hi all, I would like to know the difference between Event Hashing & IT block signing on measures like which is more ... by lohit Path Finder in Security 10-09-2013 0 1	0	1
Mask Splunk access logs I'm wondering if it's possible to mask/scrub the Splunk access logs. If so, how? It's for a security requirement. We... by BryanBerry Path Finder in Security 10-07-2013 0 5	0	5
User LDAP Authentication with "Log On To" Workstation AD Restriction We configured SPLUNK to use Active Directory as authentication system. Problem occurs with users that have "Log On To... by mzorzi Splunk Employee in Security 10-04-2013 0 2	0	2
Insecure login issue in new splunk setup Hi, In our system, we are always getting insecure login error. Our system is on RHEL 5.x. When I reboot the Search H... by strive Influencer in Security 10-04-2013 0 2	0	2
Splunk 6 login page Hello, We are still stuck seeing this login page after logging in several times with admin and other LDAP users. In ... by aaronkorn Splunk Employee in Security 10-04-2013 0 4	0	4
Session lock files All of my indexers have thousands of session lock files similar to -rw------- 1 root root 0 Jan 27 16:38 ... by mslvrstn Communicator in Security 10-04-2013 1 4	1	4