Security

Community Activity

OpenSSL VERIFY_NONE, Splunk Heavy Forwarder, db_connect, Chef, Ruby, vulnerability remediation Hi friends:Looking for some assistance from savvy folks with heavy forwarders / db_connect / ssl experience. Environ... by tilburn Observer in Security 06-10-2021 0 0	0	0
What is the minimum permissions I can give a user to input data into the KV Store via REST API? So far I've tried the built in roles User/Power/Admin, but only Administrator worked. I was wondering if anybody new... by ollie920049 Path Finder in Security 06-09-2021 5 15	5	15
Splunk cloud rest API call related security questions Dear All,We are trying to build splunk cloud rest api call where we will be sending data from splunk cloud to another... by santosh121 Explorer in Security 06-09-2021 0 1	0	1
How do I set up SSL forwarding with new, self-signed certificates and authentication? I would like to set up my Splunk-to-Splunk (forwarder to indexer) connections to use SSL with common-name-based authe... by hexx Splunk Employee in Security 06-09-2021 24 14	24	14
Admin access to specific app Hi, i would like to give admin access to specific user 'Admin' access to specific app, how do i accomplish that? by SS1 Path Finder in Security 06-08-2021 0 1	0	1
CIM compliant date field Afternoon, I'm trying to format the date field for the malware data model. Converting it from epoc. But I dont know... by lilredcrawfish Explorer in Security 06-08-2021 0 1	0	1
How to mask password in Windows event logs ? Hello,I am trying to mask the password in the Windows event logs at index time but somehow my config is not working. ... by kamaljagga Path Finder in Security 06-08-2021 0 11	0	11
Limit View of Navigation Menu Hi,Is there a way to limit or restrict the view of our custom "Navigation Menu" . Like we want to hide some reports f... by aquinojason Path Finder in Security 06-03-2021 0 1	0	1
Splunk Enterprise Security - Notable limit Hi all,I have Splunk ES, with a bunch of rules.The issue is that correlation rules generate notables for each result,... by astatrial Contributor in Security 05-31-2021 0 0	0	0
Creating HEC token for clustered environment Hi All, We have a clustered environment where we want to enable and add HEC on Heavy Forwarder but I am not able to f... by payl_chdhry Path Finder in Security 05-31-2021 0 2	0	2
How do you prevent a Splunk Enterprise receiver from receiving unauthorized data? I am working on a proof of concept but I am failing to see where security comes in regarding forwarders and receivers... by kunou126 Engager in Security 05-31-2021 1 3	1	3
Reg. Ransomware. In addition to Security Essentials what other steps do I need to take to protect using Splunk? Reg. Ransomware. In addition to Security Essentials what other steps do I need to take to protect using Splunk. How d... by SamHTexas Builder in Security 05-28-2021 0 0	0	0
Difference between cacert.pem ca.pem server.pem Hello guys,is there documentation somewhere explaining roles of default certificates, especially cacert.pem/ca.pem :c... by splunkreal Motivator in Security 05-28-2021 0 4	0	4
cacert.pem - Why does Splunk need it to start? Quick details: We are running Splunk 6.4.2 on Windows 2k8 as a standalone deployment. We are using third part certs... by ebdavis New Member in Security 05-28-2021 0 2	0	2
Why am I unable to browse for more apps? Dear Friends. Please help me, I am new to Splunk. I cannot browse for More Apps. when i click on "Find more Apps"... by fazilhussain Explorer in Security 05-25-2021 0 4	0	4
User Browser extract Issue H Team I tried the below command , but the output is incorrect where all the count are showing under other instead . ... by jaibalaraman Path Finder in Security 05-23-2021 0 1	0	1
Several User groups cannot access indexes they have been whitelisted for in authorize.conf I have several groups with access to the same index. In authorize.conf these groups all either have access to wildcar... by gharri27 New Member in Security 05-21-2021 0 0	0	0
Can't contact LDAP Server (-1) Reason - ber_get_next failed Currently LDAP authentication is configured through an app on search heads and managed via deployment server. However... by dm1 Contributor in Security 05-20-2021 0 0	0	0
useSSL doesn't seem to work in 8.0.2.1 I am trying to set up my forwarders to use SSL without having to use the built in client certs on version 8.0.2.1. It... by agitelzon Explorer in Security 05-19-2021 0 1	0	1
Splunk and CyberArk vault Greetings:I inherited a splunk instance. We use CyberArk to manage our passwords Web GUI and CLI. Here is my prob... by jcorcoran508 Path Finder in Security 05-15-2021 0 1	0	1
Splunk web restriction Hello Splunkers,Is there a way to restrict web-ui access ? Users shoud not be able to view any options/menus to choos... by garumuga New Member in Security 05-14-2021 0 3	0	3
splunk query Hi Can someone help me with the query for the below requirmenti have User A, User B, User C and so onn with the job s... by Nith1 Path Finder in Security 05-13-2021 0 3	0	3
Http Event Collector C# not working There is the sameple snippet found online: var middleware = new HttpEventCollectorResendMiddleware(100); var ecSende... by johnchen0213 New Member in Security 05-11-2021 0 2	0	2
Splunk Security Essentials - data available Hi all, I have the Splunk Security Essentials app installed and configured.I am trying to understand how the app dete... by astatrial Contributor in Security 05-10-2021 0 0	0	0
Monitor mssql logs Hi all,I would like to ask if is possible to monitor mssql transcript logs(DROP, CREATE) without using any apps? by Ning Engager in Security 05-10-2021 0 0	0	0