Security

Community Activity

splunk users expire after x days of inactivity Hi, is it possible to set an "expire after x days of inactivity" for Splunk's own built-in system users? The Manager... by scheckenbachb Explorer in Security 01-21-2013 0 1	0	1
Splunk LDAP User and Group Filters Can any one expain or point me to the docs of how the LDAP User and Group Filters work ? I have gone through the docs... by ssankeneni Communicator in Security 01-17-2013 1 3	1	3
Deployment Monitor License Usage question I'm search MB Receiveied in the Deployment Monitor, License Usage. Search by Indexer seems has a lot higher MB than ... by fuster_j Path Finder in Security 01-15-2013 2 5	2	5
Configuration Error: Invalid query specified! Missing placeholder for condition! You can see the errors when you run the saved search "Recent DB Errors". index=_internal sourcetype=dbx_debug sever... by hvandenb Path Finder in Security 01-15-2013 0 1	0	1
RADIUS Authentication Hi All, Can I add users to Splunk using Active Directory groups ? Or do I have to add them manually one by one ? Th... by vistasyslog New Member in Security 01-10-2013 0 1	0	1
Issue with assigning users to roles Hi all, I am fairly new to Splunk but i have a little bit of experiance with setting it up and making accounts and r... by asingh90 Engager in Security 01-07-2013 0 2	0	2
Tags Disappear When Changing Permissions I created a tag with a field value pair of host=server1* called test. Everything works great until I try to change th... by mmclain1 Explorer in Security 01-07-2013 0 4	0	4
REST: I want to restrict a role to only being able to run saved searches (no ad-hoc). Is this possible? by the_wolverine Champion in Security 01-03-2013 0 1	0	1
Splunk 5 compatible with Splunk 4.3 license server? Hi, at the moment I am using a Splunk 4.3 license server. Now I want to install Splunk 5 and before I install it, I ... by nebel Communicator in Security 01-03-2013 0 2	0	2
Splunk searches from deleted users We can see in our splunkd.log that is showing the following errors: UserManagerPro - Failed to get LDAP user="xxx" f... by rgtsplunk Explorer in Security 12-21-2012 2 1	2	1
ロールで選択できる権限ロールの設定で、ロール毎に権限を設定できますが、ドキュメントを見てもedit_win_eventlogsとか「win」とつく権限について説明がありません。データ入力系の権限かと思いますが、詳細を教えてください。 by ddddragon New Member in Security 12-20-2012 0 3	0	3
Mixed ldap and radius authentication Is it possible to use ldap AND radius authentication against a few indexers. ( fi with 2 searchheads if necesary) by Starlette Contributor in Security 12-19-2012 0 1	0	1
Splunkweb consumes large amounts of memory and appears to hang On restart splunkweb starts up, but does not respond to attempts to connect via web. Nestat showed that we were list... by ahattrell_splun Splunk Employee in Security 12-19-2012 1 1	1	1
ERROR TailingProcessor - matching incorrect files? I have my inputs.conf as follows on a linux env. [monitor:///mydomain/logs/project/mytestlogs*.txt] blacklist = .(gz... by lakshman237 Path Finder in Security 12-14-2012 0 2	0	2
Cant authenticate with Splunk API ?? When trying to authenticate to the API I keep getting Login Failed messages. I have changed the admin password as t... by johandk Path Finder in Security 12-14-2012 0 4	0	4
The remote service allows repeated renegotiation of TLS / SSL connections. Our Nessus scan is currently mention the following issues for a service running on port 8089 (which is the splunk for... by BastianW Path Finder in Security 12-14-2012 0 6	0	6
add data manually to license_audit.log - plausible? I would like to ask how can I 'fake' or create input of fields with values for splunk's license_audit.log to consume.... by e82than Communicator in Security 12-14-2012 0 7	0	7
© 2005-2012 Splunk Inc. Splunk UNKNOWN_VERSION build 000 Hi, I am tryint to open SPLUNK through browser as follows : http://localhost:8000/en-US/account/login?return_to=%2... by abhayneilam Contributor in Security 12-13-2012 0 1	0	1
"Could not find item" errors on Exchange host running app I'm seeing a large number of the following errors on my exchange server's Splunk log that has the Exchange applicatio... by mikelanghorst Motivator in Security 12-13-2012 0 2	0	2
parse elements of a DN In some logs i have ldap DNs which i want to slice a part out from it like the CN or the PATH without the DN. The DNs... by dominiquevocat SplunkTrust in Security 12-13-2012 0 1	0	1
Why does SplunkWeb stop immediately after starting? I am new to Splunk and just installed on Windows 32 bit OS using the installer. After completing the installation, sp... by lakshmi_raman Engager in Security 12-11-2012 2 1	2	1
Splunk License Violation I forgot to change the license from trial enterprise to free, as a result caused a few violations. Is there any way f... by oranger1426 Explorer in Security 12-10-2012 0 2	0	2
port 8000 is SSL, port 8089 is not I've set up our Splunk Web interface to use 3rd party signed certs. On a Nessus scan it's being found and is passing... by wbcattell Explorer in Security 12-05-2012 1 4	1	4
user with multiple roles Hi, I got following behavior. An ldap user is member of two roles. (role A = ldap groupA & role B = ldap groupB) ro... by harald_leitl Path Finder in Security 11-30-2012 0 4	0	4
Permissions on monitored files If permissions get changed on a log file that is being monitored by splunk and becomes unreadable, will Splunk give u... by RicoSuave Builder in Security 11-29-2012 11 3	11	3