Security

Community Activity

Permissions on monitored files If permissions get changed on a log file that is being monitored by splunk and becomes unreadable, will Splunk give u... by RicoSuave Builder in Security 11-29-2012 11 3	11	3
"You do not have permission to spawn real-time searches" Where do I find the settings to allow a user to have permission to "spawn" real-time searches? EDIT: What settings ... by matthewcanty Communicator in Security 11-29-2012 1 5	1	5
Most LDAP users don't appear/aren't usable I have setup the LDAP structure and don't see all of my users in the Group mapping. Under Manager>>Access controls>>... by rhansen Explorer in Security 11-28-2012 0 6	0	6
Splunk Manager Admin Permission Problem Hi, Just updated my search heads to 4.3 and now I get following message when trying to create new roles in Splunk ma... by harald_leitl Path Finder in Security 11-28-2012 0 3	0	3
splunkweb is not running [root@n]# ./splunk status splunkd is running (PID: 6024). splunk helpers are running (PIDs: 6025). splunkweb is not r... by coldface Engager in Security 11-28-2012 0 3	0	3
Splunk indexing while the license expireed Hi, My Splunk license is expired ang getting renewed. IN the meantime should I be able to add data to splunk and get... by indikawimalasir New Member in Security 11-27-2012 0 2	0	2
why doesn't splunk work with my reverse proxy? my current ~/system/local/web.conf is configured as [settings] httpport = 8080 mgmtHostPort = 127.0.0.1:28502 root_... by Chubbybunny Splunk Employee in Security 11-27-2012 2 3	2	3
Useful security searches I am new to Splunk and am learning all about it, I was hoping you guys would be able to give me some examples of how ... by robK123 Explorer in Security 11-24-2012 0 1	0	1
How to change password? Where do I get to change my password? Can't find it in my profile settings etc... Thanks in advance Outer_Limits by Outer_Limits New Member in Security 11-22-2012 0 5	0	5
Logs are encrypted Hi, I collect logs from Checkpoint firewall and these logs are encrypted. How do Splunk read and analyze this log ? by changhieuzi New Member in Security 11-21-2012 0 6	0	6
How to add disk sizes in splunk? Hello I need to compute a table which needs to add allocated spaces for different servers. And the data is being gr... by theouhuios Motivator in Security 11-21-2012 0 3	0	3
Accepted client certificate list for SSL authentication I'm trying to setup SSL to encrypt and authenticate communication between forwarders and indexers. I haven't started ... by rjszuste New Member in Security 11-19-2012 0 2	0	2
Password torture Please can someone help? I have installed splunk locally. I have created an account online, and I have many times su... by Outer_Limits New Member in Security 11-19-2012 0 4	0	4
User signon issues So there I was logging onto Splunk-base when do you know what happened? I can only assume my last upvote caused a spl... by Draineh Explorer in Security 11-16-2012 3 5	3	5
SUID - running as non root but use port 80 I wanted to splunk searchead to run as nonroot but to use port 80. I tried to suid on splunk binary but it's having p... by thiru25 Explorer in Security 11-15-2012 1 1	1	1
LDAP query lookup table Hi there, I would like to use an LDAP query instead of static lookup table ? Any suggestion ? Regards Clement by ClementG Path Finder in Security 11-12-2012 0 3	0	3
Auto Login Splunk 5 After upgrading my development environment from version 4 => 5, my environment stopped auto authentication. I'm tryin... by technick Explorer in Security 11-10-2012 0 1	0	1
Replacing Splunk admin account with a non standard admin account A security conscious company has a policy of removing "default" admin accounts from its software products and replaci... by dshakespeare_sp Splunk Employee in Security 11-09-2012 0 1	0	1
Password issues: why is an accepted password not accepted? Hi, newbie here... have registered, created a password, and it's been accepted (I confirmed the email). Now I'm tryi... by Outer_Limits New Member in Security 11-08-2012 0 3	0	3
Role capabilities required to add a new search peer I currently have Admin level access on my own Splunk instance and want to add a new search peer (another Splunk isnta... by pbunce1 Explorer in Security 11-08-2012 2 1	2	1
Configure Splunk instance with 2 IP addresses ? Hello Splunkers, I have a Splunk server configured with 2 interfaces (178.17.0.80, 192.168.194.80, hostname=searchhe... by sieutruc Contributor in Security 11-06-2012 0 3	0	3
Splunk crashes with ENGINE: Error in 'start' listener Hi there, read about something like this a few times, but could not find any solution. Here's what happens: had spl... by seyfried New Member in Security 11-06-2012 0 1	0	1
Resetting Administrator Password on Free License So I know that the standard way of doing this is listed here: http://splunk-base.splunk.com/answers/834/how-could-i-r... by msharp_smcm Engager in Security 11-05-2012 0 3	0	3
Can a regular User promote views/dashboards to be app-level visible? According to http://www.splunk.com/base/Documentation/4.1.4/Admin/Apparchitectureandobjectownership it sounds like i... by mctester Communicator in Security 11-02-2012 1 5	1	5
Access permissions in cisco firewall app Hey Splunkers, I got a question hopefully someone can answer. In my setup I have the cisco security suite and cisco ... by jaygirlardo New Member in Security 11-02-2012 0 7	0	7