Security

Community Activity

SPLUNK SDK JAVA Hi, I am new in splunk and I'm trying to figure out how it works, I download the splunk-sdk-java project from git and... by sanchez12 Observer in Security 12-29-2022 0 0	0	0
Certificate error while installing app via API from Gitlab? Hi all, I'm trying to install(tar.gz file) an app available on GitLab. I am using 'apps/local' endpoint to install it... by kirchoff Explorer in Security 12-27-2022 0 0	0	0
Rest call to get list of all apps and join it with SAML groups Hi,I'm using this search to join the apps with their respective SAML group roles \| rest /services/authentication/user... by avakash1109 New Member in Security 12-22-2022 0 0	0	0
Why do we have LADP invalid credential error, even though it is working correctly? Hi All, we regularly get Invalid Credential Error in splunkd all the time Even though LDAP is working correctly on a ... by nishantskhsbc Explorer in Security 12-19-2022 0 1	0	1
Encountered warning: LDAP server warning: Size limit exceeded Hi,I was going through my Splunk setup and came across this warning when I was clicking on LDAP Groups under "Authent... by mohdmikhael Explorer in Security 12-19-2022 0 0	0	0
Why can't I access Splunk Cloud platform trial? I got a free trial of the cloud platform on 12th Dec. Now that I am trying to access the account it says your account... by geetanjaligajar New Member in Security 12-15-2022 0 2	0	2
Why is my search peer SSL Config check failing? Hello there! I am working on a test environment where I only have one Splunk instance. I have succeeded to have a sec... by aatik5u Path Finder in Security 12-15-2022 0 0	0	0
How can I detect when a new IP is used by a user ? Hello, I have a search that find all the IPs used by each user. I would like to run this search periodically so that... by ctaf Contributor in Security 12-14-2022 0 4	0	4
How to disable TLS1.0 and TLS1.1 for webhook port? Hello, I'm using the MS Teams add-on to collect call records. (https://splunkbase.splunk.com/app/4994) The webhook po... by norbertt911 Communicator in Security 12-13-2022 1 0	1	0
Enhance Cloud security using Splunk Hi all, I'm a cloud security engineer. I recently started using Splunk. My organization is looking to use Splunk to e... by danieljames7077 New Member in Security 12-12-2022 0 2	0	2
What is the best way to see the alert in action? I followed a tutorial on how to create an alert for a failed root login by typing "failed password for root" The aler... by abreslin Observer in Security 12-10-2022 0 3	0	3
Are there any security vulnerability check reports done by Splunk? Hi, My customer have configured Splunk to get the data in from "GitHub audit log stream" with Http Event Collector in... by Tristan9608 Engager in Security 12-08-2022 0 0	0	0
How to hide login information from URL? I created a landing page for all applications.. but the login information is visible in url.. how can i change that x... by subitha_kennedy Loves-to-Learn Everything in Security 12-07-2022 0 2	0	2
Why don't Windows event fields appear in search result? Hi all, Recently I've upgraded all splunk deployment tiers (search head, Indexer and Heavy Forwarder) and we are coll... by esafaei Explorer in Security 12-06-2022 0 2	0	2
Splunk TLS using 3rd party CA- Cannot connect to 127.0.0.1:8000? Hello There, I have been trying to secure my Splunk web using TLS certificates. I followed this link: Configure Splun... by aatik5u Path Finder in Security 12-06-2022 0 0	0	0
How Do I Reset Splunk Enterprise Credentials 9.0.2? Hi, I'm new to Splunk and maybe I didn't follow the instructions right from a post 2 years ago I'm trying to figure o... by OgoSplunk Path Finder in Security 12-05-2022 0 2	0	2
What happens to weight of duplicate imported Threat Intelligence artifacts? When I import a Threat Intelligence source that contains an IP address e.g. 1.2.3.4 with weight=60, then another sour... by rookiemonster Splunk Employee in Security 11-30-2022 0 1	0	1
Receiving unknown error during SSO SAML Configuration Hello, We tried to enable the SAML SSO on Splunk, We thought it's simple cause of the swap of both xml configuration ... by Dim_No Loves-to-Learn Everything in Security 11-29-2022 0 0	0	0
Disable Management port on Universal Forwarder- other than most cli commands, will anything important to the UF break? I've seen a few older posts on this, so I thought I might try and get a more recent answer. There are situations in ... by jplumsdaine22 Influencer in Security 11-28-2022 0 2	0	2
How to check the expiration date of a certificate? We encountered some error on default certificates that are expiring. WE renewed the certificates but now we want to k... by leirga11 New Member in Security 11-25-2022 0 3	0	3
Is there a Splunk command to decrypt encrypted values under domain field? Hi All, I have encrypted the user field with sha256 index=abc sourcetype=xyz\| eval domain = sha256(User)\| table do... by VijaySrrie Builder in Security 11-24-2022 0 2	0	2
Is there any way to securely disable the delete command in Splunk? In Splunk there exist a delete command. Any admin in Splunk can give themself the capability to use this command. In ... by hettervik SplunkTrust in Security 11-23-2022 0 6	0	6
Why didn't event attributes show? Hi guys, I have an issue with the Enterprise Security APP where I try to add a new Event Attributes (user) that is co... by maurobissante Explorer in Security 11-22-2022 0 0	0	0
Are there any resources available for Data Science in Splunk for Security? My organization is struggling to successfully incorporate data science into existing security processes successfully.... by parkz Explorer in Security 11-21-2022 0 1	0	1
How do I resolve splunk integrity check error? Hello there, I have been trying to use splunk check-integrity to check the integrity of some indexes. I have the err... by aatik5u Path Finder in Security 11-21-2022 0 0	0	0