Security

Community Activity

How to Detect C2 Beacon? Hello, I am helping client of mine monitor network for malware or hacker and we are looking to built SPL to monitor c... by p97557150 Loves-to-Learn in Security 07-12-2023 0 1	0	1
How to ingest AWS inspector logs in to Splunk cloud? Hi We have Victoria splunk cloud for our splunk environment and and AWS cloud for our linux environment. we have de... by yr Loves-to-Learn Everything in Security 07-11-2023 0 5	0	5
Splunk's $SPLUNK_HOME/etc/passwd File syntax and encryption/hashing algorithm I've searched around a good bit.. haven't found any official documentation on the topic. On Splunk forwarders and in... by Ricapar Communicator in Security 07-11-2023 1 2	1	2
Splunk Attack Range A question regarding the splunk attack rangeI am using the attack_range and not the attack_range_local repository as ... by SecBit Observer in Security 07-07-2023 0 0	0	0
What are the minimum Splunk capabilities I need to assign a user role to send data into an index via REST API POST request? Hi guys What are the fewest number of Splunk capabilities I need to assign to a user role to send data into an index... by himynamesdave Contributor in Security 07-06-2023 3 2	3	2
Splunk 2fa with Google Authenticator? All, Has anyone ever setup Google Authenticator with Splunk for 2fa? Any walk throughs available for Splunk Enterpr... by daniel333 Builder in Security 07-05-2023 1 2	1	2
Resolving Secure Splunk web with certificate? Hello Team, i am getting "your connection to this site is not secure" on splunk web in one instance. i have installed... by anilkapoor123 Explorer in Security 07-05-2023 0 3	0	3
Splunk Migration Hi,I need an expert opinion on Splunk migration whose data is encrypted. Basically one of our customer want to migrat... by athirson Loves-to-Learn in Security 07-04-2023 0 8	0	8
Server in DMZ to Internal DNS Servers - Threat Detection Hi,We have permitted some firewall rules from Public DMZ to internal services including our DNS servers. While, we ar... by faizshir Loves-to-Learn in Security 07-03-2023 0 1	0	1
Installed SPLUNK UF/HF in Ubuntu 20.04 or later Hello,Does SPLUNK UF/HF is compatible with Ubuntu 20.x of later version? Any recommendation would be highly appreciat... by SplunkDash Motivator in Security 06-30-2023 0 1	0	1
How to enable SSL for splunk cloud with own self signed certificates? I am using Splunk Cloud and I want to use curl without insecure connection for sending data via HEC , What is the pro... by priyadarshan123 New Member in Security 06-27-2023 0 7	0	7
How to Remove 'First time signing in?' message? Hi Splunkers, after an upgrade to the latest version we keep receiving the following standard request on authenticat... by evelenke Contributor in Security 06-26-2023 1 3	1	3
How do I update the Apps or Add-ons in Splunk that need updating? How do I update the Apps, Add-ons or TAs in Splunk that need updating? Am told that not a good idea to connect Splun... by SamHTexas Builder in Security 06-24-2023 0 7	0	7
Splunk Enterprise Security Intelligence Github Data Pulling- Why can't I see information? Hi Team, I want support to know why I am not able to see lookup for my created Threat Intelligence Management Sourc... by joomla Engager in Security 06-23-2023 0 0	0	0
Splunk apps: How do you resolve certificate verification errors? I've searched the similar questions and did not find a direct answer. I have a Splunk APP (Code42) that fails becaus... by SplunkIT3337 Explorer in Security 06-21-2023 2 10	2	10
How to exclude the service account from the event of Splunk ES? Hi,I'm trying to exclude the service accounts of the users from the below event in splunk ES.<Event xmlns='http://sch... by AL3Z Builder in Security 06-19-2023 0 3	0	3
from Splunk what encryption protocols are used for NetScaler queries? Hi All,do you know if we can tell from Splunk what encryption protocols are used for NetScaler queries? There is no A... by GoliSH Engager in Security 06-16-2023 0 0	0	0
How to get TLS certificate to secure communication between forwarder and indexers? We have to update the certificates for secure communication between UF, HF and indexer. The way to prepare a combined... by Gursimar_singh Engager in Security 06-13-2023 0 0	0	0
Splunk Enterprise Windows - openssl.cnf file default location? WARNING: can't open config file: C:\\gitlab_runner\\builds\\build_home\\splunk/ssl/openssl.cnf So why is the default ... by NK Path Finder in Security 06-09-2023 0 3	0	3
How to add splunk es adaptive response action notable event? I am try add to my notable event in correlation search next step analyst need to take. I am see some issue. when I li... by abi2023 Path Finder in Security 06-07-2023 0 1	0	1
What is the best way to simulate Attacks in Splunk? Hi All, I would like to know what is the best way to simulate attacks within my organisation. I cannot use Virtualbo... by SecBit Observer in Security 06-06-2023 0 4	0	4
Is there an easy way to tell what role a Splunk server is? Is there an easy way to tell what role a Splunk server is? by Quantum Explorer in Security 06-06-2023 0 3	0	3
Will upgrading to Splunk Cloud 9.0.2303.100 fix Splunk vulnerabilities June 1st? Hello, Splunk published multiple vulnerabilities on June 1st. Reading through the documentation of every vulnerabilit... by aberger0 Engager in Security 06-05-2023 0 3	0	3
Splunk Cloud- How do I run rest dispatch_rest_to_indexers? Hi. I am trying to run this in splunk cloud: \|rest /services/search/jobs\|search isRealTimeSearch=1 But getting this: ... by KeithH Communicator in Security 06-01-2023 0 5	0	5
Do services typically running on a heavy forwarder? I have two machines one looks like it's a heavy forwarder, I can browse into the GUI of the first Splunk server but... by Quantum Explorer in Security 05-30-2023 0 2	0	2