Security

Community Activity

Tuning ES to environment How are you tuning ES to your environment? Are you overwriting the correlation searches that ship with ES or are you ... by wgawhh5hbnht Communicator in Security 08-31-2021 0 1	0	1
Unable to connect to splunk enterprise AMI with default username and password Hi y’all. I recently installed splunk enterprise AMI instance in EC2. Unfortunately, I am unable to access with the d... by priyakvs New Member in Security 08-27-2021 0 0	0	0
How can I set up LDAP for all my Splunk servers at one time? How can I set up LDAP for all my Splunk servers at one time? Am I going to have to set this up individually on each ... by cajunitalian Engager in Security 08-27-2021 1 4	1	4
Is there any way to unhash a hashed BindDN password Let's say I needed to restore the password. How hard would it be to do that? by bfaber Communicator in Security 08-26-2021 0 8	0	8
SplunkWeb fails to start - timeout when binding to port The problem: When trying to start splunk, splunkweb errors out (supposedly on binding to the port, but I am skeptica... by crazygir Explorer in Security 08-23-2021 3 9	3	9
Can't connect to http://myserver:8000 on fresh install CentOS7 I've just installed latest splunk on a fresh minimal CentOS 7 installation. Installation process showed no warnings... by amanogue New Member in Security 08-23-2021 0 4	0	4
How do I safely store passwords in my splunk app? App Inspect returns a manual check that declares "Check that no plain text authorization credentials are stored in th... by dnguyen_splunk Splunk Employee in Security 08-23-2021 1 3	1	3
Basic security function of delete account missing Hi,The basic function of delete my account is missing.Which ultimately leads me to abundaunning of my account. by Splkmap New Member in Security 08-23-2021 0 3	0	3
How to update Email Address in Splunk profie HI Team,I need to add my company email address to my SplunK profile.I want to update it with my professional email ID... by VinKadam New Member in Security 08-23-2021 0 2	0	2
prompt for admin user name "Your session is invalid. Please login" How to avoid that? Hello, When certain splunk administration commands are executed (eg, offline) sometimes on some servers i get promt ... by sim_tcr Communicator in Security 08-19-2021 0 4	0	4
detect web application vulnerabilities hiI want to detect web vulnerabilities for example "XSS" or " SQLI" with splunk. for this target i collect apache log... by szone Engager in Security 08-17-2021 0 2	0	2
SMTP configuration in backend How to update SMTP credentials in the backend config. in which config file we should update. Do we need to encrypt th... by syedabuthahir Explorer in Security 08-15-2021 0 3	0	3
SOC Dashboard I am new to the SOC environment. I was tasked to create a personal dashboard. What items/data should I put into the d... by Sharlann Engager in Security 08-15-2021 0 2	0	2
How to allow TLSv1.1 with AES256-SHA in HEC with Splunk 8? Splunk 8's HEC defaults to TLSv1.2 only. But I have a need to allow TLSv1.1 with AES256-SHA in order for puppetserve... by yuanliu SplunkTrust in Security 08-14-2021 0 1	0	1
Using Auth0 for SAML I've created this guide about Integrating Splunk with Auth0 for SAML authentication http://isbyr.com/configure-splunk... by ilyaresh Path Finder in Security 08-13-2021 0 3	0	3
Splunk could not update permissions for resource data/transforms/lookups I tried to change in permissions from private to Global of lookup table and definition- and automatic lookups- in 2 i... by joy76 Path Finder in Security 08-13-2021 6 9	6	9
not able to modify users role in python newuser = service.users.update(username=modify_username,roles=modify_role).refresh()AttributeError: 'Users' object ha... by testuser143 Observer in Security 08-11-2021 0 1	0	1
Need guidance on how to create an alert for domain admin failed logins I am very new to splunk and need some help on creating an alert to report on failed domain admin logins. by rmakjr0318 New Member in Security 08-10-2021 0 1	0	1
CLI "login failed" error on DS Hello all,Configured custom ssl certificates on Deployment Server (both splunkd and splunk web), and deployment clien... by cnuguri_ncc Path Finder in Security 08-06-2021 0 6	0	6
Splunk User is Created automatically when i done a splunk installation ?? Hi , I have used a rpm installation of SPLUNK Forwarder 5.0.4 and installed in my linux server ,upon installation i ... by rakesh_498115 Motivator in Security 08-05-2021 0 5	0	5
Script for Splunk admin password change Hi Folks, Can anyone please help me with a script that help to change splunk admin password across 100 servers? It s... by inayath_khanin1 Explorer in Security 08-03-2021 0 3	0	3
Adding Client Certificate (mTLS) Support to Splunk Event token authentication. We have a requirement to support client certificates (mTLS) for the Splunk authentication mechanism with Event Collec... by amshukla New Member in Security 08-02-2021 0 0	0	0
LDAP authentication in Splunk is not working I have recently configured splunk to use ldap authentication. The configuration is pretty straight forward, I can see... by jasonsun Explorer in Security 08-02-2021 0 7	0	7
Troubleshooting SSL Error on Forwarder I am troubleshooting an SSL error. I am receiving this error: ERROR SSLCommon - Can't read key file C:\Program Fi... by pauldr01 Engager in Security 08-02-2021 2 2	2	2
How to get session key / auth token for mod input script Hi,I'm currently trying to get the auth token that can be used for rest apis without exposing my password. Since it i... by jimmycmfu New Member in Security 07-30-2021 0 0	0	0