Security

Community Activity

Multiple CAs in cluster? Hi There.I know I can use multiple inputs/outputs with separate CAs and even certs to permit different peers to injec... by PickleRick SplunkTrust in Security 03-02-2021 0 5	0	5
SSL certificate in Splunk web Hi Splunkers,I have clustered environment. One of indexer got SSL expired. I have created csr and pem file. Bu submit... by Dharani Path Finder in Security 02-26-2021 0 3	0	3
Qualys reporting vulnerabilities on splunk port 8090 Hello,Qualys scans in our environment reporting issues on SSL and TLSv1.0, TLSv1.1.We are able to fix the TLS ones, n... by wongea Explorer in Security 02-26-2021 0 1	0	1
How are passwords encrypted in Splunk? What method is used to protect and encrypt passwords in Splunk. For example the "Users" passwords (when Local type of... by alexander_lucas Explorer in Security 02-25-2021 0 3	0	3
Where is SAML_script_azure.py? This doc, https://docs.splunk.com/Documentation/Splunk/8.1.0/Security/ConfigureauthextensionsforSAMLtokens, says that... by thormanrd Path Finder in Security 02-24-2021 0 2	0	2
Splunk 6.0.1 and OSX firewall Hi everybody, On my OSX (mac mini) server I can connect to splunk (localhost:8000). When I want to connect to the sp... by splunkminiuser Engager in Security 02-23-2021 2 4	2	4
Scripted PAM authentication in 8.1.2 We have setup a distributed sandbox system with release 8.1.2.We have configured scripted authentication on our searc... by Marlan Explorer in Security 02-23-2021 0 1	0	1
How to update/delete existing credentials using splunklib service I am following this blog http://www.georgestarcher.com/splunk-stored-encrypted-credentials/ to delete and create a ne... by assadabbas Loves-to-Learn Lots in Security 02-22-2021 0 0	0	0
I can't find "roles" tab on splunk web in 8.0.7 version Hi,I am confused about the new "USERS AND AUTHENTICATION" section in settings tab. How can I add "roles" tab ? Actual... by mah Builder in Security 02-22-2021 0 0	0	0
Does Splunk support Microsoft Azure AD B2C? Hi Splunkers I need to know if splunk supports Azure AD B2C to allow anyone to sign up as a user in a service with t... by evinasco Communicator in Security 02-18-2021 0 1	0	1
Quarantine a Peer before or after running splunk offline command Hello, It seems that my current process of quarantining a search peer and then running 'splunk offline' causes search... by jordanking1992 Path Finder in Security 02-17-2021 0 3	0	3
How to deploy self-signed certs to deployment clients using the deployment server How do I push my self-signed certs to universal forwarders using the deployment server. The docs say: Define the fol... by dflodstrom Builder in Security 02-16-2021 0 7	0	7
Unknown search command 'return' When a query with 'return' command is run by a non admin user, it throws the error Unknown search command 'return' ... by Parameshwara Path Finder in Security 02-12-2021 1 3	1	3
cluster-bundle / local sslPassword not updated Hello guys,Just noticed on preproduction environment local sslPassword on cluster member has not been updated when pu... by splunkreal Motivator in Security 02-10-2021 0 0	0	0
Warning on Searches and Dashboards on a Splunk Security Essentials Lookup Hello,I am getting this new warning on my dashboards and searches of a Security Essentials Lookup. I have done btool... by jbender72 Path Finder in Security 02-10-2021 0 0	0	0
Users missing from Access Control We have almost 500 Splunk users in our organization (a mix of local and LDAP). About 200+ of our Splunk users are no ... by chillsgrove Explorer in Security 02-09-2021 2 5	2	5
Role: Limit access to one host of one index Hello,we are using Splunk v8.1.1I have one user with multiple roles, so he can access multiple indexes and hosts.The ... by chrisitanmoleck Path Finder in Security 02-04-2021 0 1	0	1
Custom Splunk management port 8089 certificate Hello guys,tried to update server.conf but Splunk crashed with handshake failure accessing https://localhost:8089[ssl... by splunkreal Motivator in Security 02-02-2021 0 2	0	2
how to forward through a dmz from a network zone to another ? Hello everyone, I've got a local universal forwarder on an internal network. (all in linux env)My intermediate forwar... by emallinger Communicator in Security 02-01-2021 0 5	0	5
Should we run Splunk as root or non-root user? Should we run Splunk as root or non-root user? Which way is better? Thanks -Ha by hadinh Explorer in Security 01-30-2021 7 9	7	9
I've got my data in but I now need to get some good use cases out of the windows log data! Relatively new to splunk but after a few challenges I have my splunk deployment up and running. I've limited this to ... by achauhan2098 Engager in Security 01-28-2021 0 1	0	1
I have this problem to configure Active Directory splunk 8.1.1 Error01-27-2021 08:08:46.410 -0300 WARN ScopedLDAPConnection - strategy="SIEM" LDAP Server returned warning in search... by Elisvan Engager in Security 01-28-2021 0 2	0	2
LDAP Authentication Hello All, first time user in the commnunity. We currently have a number of users in our Splunk environment using loc... by oylkm Explorer in Security 01-27-2021 0 1	0	1
Help with eStreamer and Cisco Hello everyone, Spending a lot of time with set up of eStreamer for a Cisco ASA firewall. Still receiving these erro... by jbender72 Path Finder in Security 01-26-2021 0 1	0	1
Can I give local user authentication priority over LDAP or SAML? Hello. I am configuring SAML. If my SAML configuration fails, I do not want to get locked out. I want to create a loc... by snimesh Explorer in Security 01-25-2021 0 0	0	0