Security

Community Activity

Can I get the ES asset lookup to also tag hosts? Hi,We want to be able to tag our host assets to help filter on prod and non-prod environments. We can't use dest beca... by ebs Communicator in Security 03-09-2021 0 1	0	1
Is it possible to use SAML, LDAP and Splunk authentication at the same time? Is it possible to use SAML, LDAP and Splunk authentication at the same time? If yes, which is the order of the authen... by FritzWittwer_ol Contributor in Security 03-08-2021 1 3	1	3
Splunk Cloud Free Trial: certificate verify failed (self signed certificate in certificate chain) error message Hi,I am evaluating Splunk Cloud (Free Trial for now) and running into the problem while submitting logs to HEC: SSL_c... by afsku Engager in Security 03-05-2021 0 0	0	0
search for temporary users in privileged groups How can I create search for temporary users in privileged groups? Domain Admins, Enterprise Admins, Schema Admins, Ac... by brandylee1993 Explorer in Security 03-05-2021 0 1	0	1
Index Routing/Separation Across Multiple VPCs Hello Everyone,I have an environment consisting of three VPC's (say x, y, and z). Each VPC holds Linux, Windows and A... by astackpole Path Finder in Security 03-03-2021 0 4	0	4
Required capabilities to upload a file Hi all,From one client is required that users, with a role similar to power, have to be able to upload files using th... by pbalbasdtt Path Finder in Security 03-03-2021 0 2	0	2
Multiple CAs in cluster? Hi There.I know I can use multiple inputs/outputs with separate CAs and even certs to permit different peers to injec... by PickleRick SplunkTrust in Security 03-02-2021 0 5	0	5
SSL certificate in Splunk web Hi Splunkers,I have clustered environment. One of indexer got SSL expired. I have created csr and pem file. Bu submit... by Dharani Path Finder in Security 02-26-2021 0 3	0	3
Qualys reporting vulnerabilities on splunk port 8090 Hello,Qualys scans in our environment reporting issues on SSL and TLSv1.0, TLSv1.1.We are able to fix the TLS ones, n... by wongea Explorer in Security 02-26-2021 0 1	0	1
How are passwords encrypted in Splunk? What method is used to protect and encrypt passwords in Splunk. For example the "Users" passwords (when Local type of... by alexander_lucas Explorer in Security 02-25-2021 0 3	0	3
Where is SAML_script_azure.py? This doc, https://docs.splunk.com/Documentation/Splunk/8.1.0/Security/ConfigureauthextensionsforSAMLtokens, says that... by thormanrd Path Finder in Security 02-24-2021 0 2	0	2
Splunk 6.0.1 and OSX firewall Hi everybody, On my OSX (mac mini) server I can connect to splunk (localhost:8000). When I want to connect to the sp... by splunkminiuser Engager in Security 02-23-2021 2 4	2	4
Scripted PAM authentication in 8.1.2 We have setup a distributed sandbox system with release 8.1.2.We have configured scripted authentication on our searc... by Marlan Explorer in Security 02-23-2021 0 1	0	1
How to update/delete existing credentials using splunklib service I am following this blog http://www.georgestarcher.com/splunk-stored-encrypted-credentials/ to delete and create a ne... by assadabbas Loves-to-Learn Lots in Security 02-22-2021 0 0	0	0
I can't find "roles" tab on splunk web in 8.0.7 version Hi,I am confused about the new "USERS AND AUTHENTICATION" section in settings tab. How can I add "roles" tab ? Actual... by mah Builder in Security 02-22-2021 0 0	0	0
Does Splunk support Microsoft Azure AD B2C? Hi Splunkers I need to know if splunk supports Azure AD B2C to allow anyone to sign up as a user in a service with t... by evinasco Communicator in Security 02-18-2021 0 1	0	1
Quarantine a Peer before or after running splunk offline command Hello, It seems that my current process of quarantining a search peer and then running 'splunk offline' causes search... by jordanking1992 Path Finder in Security 02-17-2021 0 3	0	3
How to deploy self-signed certs to deployment clients using the deployment server How do I push my self-signed certs to universal forwarders using the deployment server. The docs say: Define the fol... by dflodstrom Builder in Security 02-16-2021 0 7	0	7
Unknown search command 'return' When a query with 'return' command is run by a non admin user, it throws the error Unknown search command 'return' ... by Parameshwara Path Finder in Security 02-12-2021 1 3	1	3
cluster-bundle / local sslPassword not updated Hello guys,Just noticed on preproduction environment local sslPassword on cluster member has not been updated when pu... by splunkreal Motivator in Security 02-10-2021 0 0	0	0
Warning on Searches and Dashboards on a Splunk Security Essentials Lookup Hello,I am getting this new warning on my dashboards and searches of a Security Essentials Lookup. I have done btool... by jbender72 Path Finder in Security 02-10-2021 0 0	0	0
Users missing from Access Control We have almost 500 Splunk users in our organization (a mix of local and LDAP). About 200+ of our Splunk users are no ... by chillsgrove Explorer in Security 02-09-2021 2 5	2	5
Role: Limit access to one host of one index Hello,we are using Splunk v8.1.1I have one user with multiple roles, so he can access multiple indexes and hosts.The ... by chrisitanmoleck Path Finder in Security 02-04-2021 0 1	0	1
Custom Splunk management port 8089 certificate Hello guys,tried to update server.conf but Splunk crashed with handshake failure accessing https://localhost:8089[ssl... by splunkreal Motivator in Security 02-02-2021 0 2	0	2
how to forward through a dmz from a network zone to another ? Hello everyone, I've got a local universal forwarder on an internal network. (all in linux env)My intermediate forwar... by emallinger Communicator in Security 02-01-2021 0 5	0	5