Security

Community Activity

detect web application vulnerabilities hiI want to detect web vulnerabilities for example "XSS" or " SQLI" with splunk. for this target i collect apache log... by szone Engager in Security 08-17-2021 0 2	0	2
SMTP configuration in backend How to update SMTP credentials in the backend config. in which config file we should update. Do we need to encrypt th... by syedabuthahir Explorer in Security 08-15-2021 0 3	0	3
SOC Dashboard I am new to the SOC environment. I was tasked to create a personal dashboard. What items/data should I put into the d... by Sharlann Engager in Security 08-15-2021 0 2	0	2
How to allow TLSv1.1 with AES256-SHA in HEC with Splunk 8? Splunk 8's HEC defaults to TLSv1.2 only. But I have a need to allow TLSv1.1 with AES256-SHA in order for puppetserve... by yuanliu SplunkTrust in Security 08-14-2021 0 1	0	1
Using Auth0 for SAML I've created this guide about Integrating Splunk with Auth0 for SAML authentication http://isbyr.com/configure-splunk... by ilyaresh Path Finder in Security 08-13-2021 0 3	0	3
Splunk could not update permissions for resource data/transforms/lookups I tried to change in permissions from private to Global of lookup table and definition- and automatic lookups- in 2 i... by joy76 Path Finder in Security 08-13-2021 6 9	6	9
not able to modify users role in python newuser = service.users.update(username=modify_username,roles=modify_role).refresh()AttributeError: 'Users' object ha... by testuser143 Observer in Security 08-11-2021 0 1	0	1
Need guidance on how to create an alert for domain admin failed logins I am very new to splunk and need some help on creating an alert to report on failed domain admin logins. by rmakjr0318 New Member in Security 08-10-2021 0 1	0	1
CLI "login failed" error on DS Hello all,Configured custom ssl certificates on Deployment Server (both splunkd and splunk web), and deployment clien... by cnuguri_ncc Path Finder in Security 08-06-2021 0 6	0	6
Splunk User is Created automatically when i done a splunk installation ?? Hi , I have used a rpm installation of SPLUNK Forwarder 5.0.4 and installed in my linux server ,upon installation i ... by rakesh_498115 Motivator in Security 08-05-2021 0 5	0	5
Script for Splunk admin password change Hi Folks, Can anyone please help me with a script that help to change splunk admin password across 100 servers? It s... by inayath_khanin1 Explorer in Security 08-03-2021 0 3	0	3
Adding Client Certificate (mTLS) Support to Splunk Event token authentication. We have a requirement to support client certificates (mTLS) for the Splunk authentication mechanism with Event Collec... by amshukla New Member in Security 08-02-2021 0 0	0	0
LDAP authentication in Splunk is not working I have recently configured splunk to use ldap authentication. The configuration is pretty straight forward, I can see... by jasonsun Explorer in Security 08-02-2021 0 7	0	7
Troubleshooting SSL Error on Forwarder I am troubleshooting an SSL error. I am receiving this error: ERROR SSLCommon - Can't read key file C:\Program Fi... by pauldr01 Engager in Security 08-02-2021 2 2	2	2
How to get session key / auth token for mod input script Hi,I'm currently trying to get the auth token that can be used for rest apis without exposing my password. Since it i... by jimmycmfu New Member in Security 07-30-2021 0 0	0	0
Anyway to see X-Forwarded-For in Splunk access logs? I'm looking to implement some brute force login attempt detection/mitigation for a Splunk cluster. Splunkweb in this ... by jimcroft Explorer in Security 07-29-2021 1 14	1	14
SSL Error preventing upgrade to Splunk 8 Context: Windows 10 Pro Splunk 7.3.4 What? Trying to upgrade to Splunk 8.0.1. Half way during the upgrade the instal... by csyvenky Path Finder in Security 07-29-2021 1 2	1	2
Update/Correct email address I know email field is not editable but shouldn't there be an option to update email address. And if its there for som... by priyankak10 New Member in Security 07-29-2021 0 2	0	2
Unable to update email address in my Splunk Account profile Hello Everyone, I'm trying to update a new email address in Splunk.com > Dashboard> My accounts > Update email addre... by Nvijay92 Explorer in Security 07-29-2021 1 8	1	8
CVE-2018-11409 Nessus Scan Trick modify restmap.conf Hello All,Nessus keeps throwing the error that "/en-US/splunkd/__raw/services/server/info/server-info?output_mode=jso... by kballow Observer in Security 07-28-2021 0 0	0	0
Splunk Phantom When trying to change the tenant contact information on Phantom in the multi-tenancy section of Product Settings , I ... by DerrickI54 New Member in Security 07-27-2021 0 0	0	0
Validating the path logs are taking to get to Splunk Hi,I have configured a couple of new hosts to forward Windows logs directly to Splunk cloud rather than going via on ... by cbrissett Engager in Security 07-27-2021 0 1	0	1
Microsoft Azure Add on for Splunk NO authenticationDetail resource type It seems that the authenticationDetail resource type is no longer part of the: Sign-ins - Azure AD sign-ins including... by zschmerber Explorer in Security 07-27-2021 0 1	0	1
Does upgrading version renews default certificates? Hello guys,Do you know if upgrading version automatically renews default certificates like valid or expired server.pe... by splunkreal Motivator in Security 07-22-2021 0 1	0	1
cipherSuite in various .conf files Hi, we know about the cipherSuite option to set and configure the SSL cipher to be used. But since it can be set in ... by lcshared Explorer in Security 07-21-2021 0 8	0	8