Security

Community Activity

issues with SAML and DUO - not returning groups We have a new Splunk cloud instance and have DUO integrated to Splunk via SAML. Authentication works fine but Splunk ... by cbehr Loves-to-Learn Lots in Security 03-23-2021 0 0	0	0
Search auto canceling When ever I run some query my search is getting auto cancelled. My search head is a single search heard and searchin... by msplunk33 Path Finder in Security 03-21-2021 0 3	0	3
Role Capability to Query Lookup Hello, I am trying to figure out which Role Capability controls being able to use a lookup in a query. If I select ... by dglass0215 Path Finder in Security 03-19-2021 0 6	0	6
Change splunk web server from the default setting of port 8000 to port 8081 How do I change the splunk web server's port 8000 to port 8081? Using port 8080 I can not access the web server, whi... by boris Path Finder in Security 03-18-2021 5 8	5	8
User login Error Users' account is setup properly in Active Directory. They have the appropriate role(s) assigned, but when attemptin... by mercerml New Member in Security 03-18-2021 0 2	0	2
Waiting for web server to be available for over 30 minutes I was having problems with one of my heavy forwarders (splunk 6.6.3) running on Windows 2008, so I noted what inputs ... by reswob4 Builder in Security 03-17-2021 1 17	1	17
Does Splunk latest version (8.1.2) supports on Centos 8 Hi,Can you please let me know, if Splunk latest version (8.1.2) supports/works in Centos 8 in the distributed enviro... by anitha Engager in Security 03-17-2021 0 2	0	2
Data encryption in Splunk Hiwe are using Splunk 7.3.4 , wanted to confirm the data indexed is not encrypted by default by rayar Contributor in Security 03-14-2021 0 1	0	1
When I try to restart the indexer in clustering. I will get bet below error"Web interface does not seem to beavailable" by Dhanaskv Path Finder in Security 03-13-2021 0 1	0	1
How to restrict access to one certain index without changing all the other roles? The use case seems simple enough: Lets say we have index sensitive_data that contains... sensitive data. We want to ... by neiljpeterson Communicator in Security 03-12-2021 2 10	2	10
Can I get the ES asset lookup to also tag hosts? Hi,We want to be able to tag our host assets to help filter on prod and non-prod environments. We can't use dest beca... by ebs Communicator in Security 03-09-2021 0 1	0	1
Is it possible to use SAML, LDAP and Splunk authentication at the same time? Is it possible to use SAML, LDAP and Splunk authentication at the same time? If yes, which is the order of the authen... by FritzWittwer_ol Contributor in Security 03-08-2021 1 3	1	3
Splunk Cloud Free Trial: certificate verify failed (self signed certificate in certificate chain) error message Hi,I am evaluating Splunk Cloud (Free Trial for now) and running into the problem while submitting logs to HEC: SSL_c... by afsku Engager in Security 03-05-2021 0 0	0	0
search for temporary users in privileged groups How can I create search for temporary users in privileged groups? Domain Admins, Enterprise Admins, Schema Admins, Ac... by brandylee1993 Explorer in Security 03-05-2021 0 1	0	1
Index Routing/Separation Across Multiple VPCs Hello Everyone,I have an environment consisting of three VPC's (say x, y, and z). Each VPC holds Linux, Windows and A... by astackpole Path Finder in Security 03-03-2021 0 4	0	4
Required capabilities to upload a file Hi all,From one client is required that users, with a role similar to power, have to be able to upload files using th... by pbalbasdtt Path Finder in Security 03-03-2021 0 2	0	2
Multiple CAs in cluster? Hi There.I know I can use multiple inputs/outputs with separate CAs and even certs to permit different peers to injec... by PickleRick SplunkTrust in Security 03-02-2021 0 5	0	5
SSL certificate in Splunk web Hi Splunkers,I have clustered environment. One of indexer got SSL expired. I have created csr and pem file. Bu submit... by Dharani Path Finder in Security 02-26-2021 0 3	0	3
Qualys reporting vulnerabilities on splunk port 8090 Hello,Qualys scans in our environment reporting issues on SSL and TLSv1.0, TLSv1.1.We are able to fix the TLS ones, n... by wongea Explorer in Security 02-26-2021 0 1	0	1
How are passwords encrypted in Splunk? What method is used to protect and encrypt passwords in Splunk. For example the "Users" passwords (when Local type of... by alexander_lucas Explorer in Security 02-25-2021 0 3	0	3
Where is SAML_script_azure.py? This doc, https://docs.splunk.com/Documentation/Splunk/8.1.0/Security/ConfigureauthextensionsforSAMLtokens, says that... by thormanrd Path Finder in Security 02-24-2021 0 2	0	2
Splunk 6.0.1 and OSX firewall Hi everybody, On my OSX (mac mini) server I can connect to splunk (localhost:8000). When I want to connect to the sp... by splunkminiuser Engager in Security 02-23-2021 2 4	2	4
Scripted PAM authentication in 8.1.2 We have setup a distributed sandbox system with release 8.1.2.We have configured scripted authentication on our searc... by Marlan Explorer in Security 02-23-2021 0 1	0	1
How to update/delete existing credentials using splunklib service I am following this blog http://www.georgestarcher.com/splunk-stored-encrypted-credentials/ to delete and create a ne... by assadabbas Loves-to-Learn Lots in Security 02-22-2021 0 0	0	0
I can't find "roles" tab on splunk web in 8.0.7 version Hi,I am confused about the new "USERS AND AUTHENTICATION" section in settings tab. How can I add "roles" tab ? Actual... by mah Builder in Security 02-22-2021 0 0	0	0