Security

Community Activity

Monitoring for Emails Sent Externally Hello, I am looking for assistance developing a Splunk query that will display all users within my organization that ... by ccolbert Engager in Security 01-08-2021 0 1	0	1
Private KO Access Post SAML Implimentation What happens to privately owned knowledge objects when the Splunk authentication method is switched from Native Splun... by Ed11375 Explorer in Security 01-08-2021 0 0	0	0
My splunk web server is not loading........It happens with my search peers when i m doing index clustering Everytime when i configure do Index clustering the peer nodes work fine.When next day I try to open my peer nodes web... by Sabareesh Observer in Security 01-06-2021 0 7	0	7
Splunk Enterprise notables generated after 10hours Hello, In splunk Enterprise Has anyone experienced cases where notable events are generated after 10+hrs the trigger ... by rsawant2085 Engager in Security 01-06-2021 0 1	0	1
app or macro to summarize unix user and group permissions We are indexing the unix /etc/passwd /etc/group and /etc/sudoers in splunk. Now we have to create reports and dashboa... by wfskmoney Path Finder in Security 12-24-2020 0 8	0	8
Best option to filter data by user in data model accelerate Hello!! I have a question about how to do something.Within an index I have a field called entity, this corresponds to... by DaniloMejia Explorer in Security 12-24-2020 0 4	0	4
Remove Security Essentials How do I remove the Security Essentials app? Just remove the directory from apps/ on the search head? by mikefg Communicator in Security 12-23-2020 0 2	0	2
SE-IncidentReviewDashboard- Need metrics of Notables by Investigation Options In Splunk Enterprise Security , Incident Review Dashboard , I am adding 2 different Investigation Option to the notab... by vn_g Path Finder in Security 12-22-2020 0 0	0	0
Cluster Licensing and Monitoring Dashboard Permissions Required to View I have Splunk 8.0.5:One cluster masterOne Search headTwo indexers to host clustered indexesI am logged into the UI o... by shocko Contributor in Security 12-21-2020 0 5	0	5
Read Access to Logs for Splunk ID on AIX Hi Team,We need your help related to file permission. We are installing the spunk agent on the AIX servers to read th... by sewabal Observer in Security 12-21-2020 0 0	0	0
Splunk Server PEM File Expired - SSO(SAML) Not working Hallo Team, Need some help regarding Certificates and SSO.From December 14th onwards, we are unable to access our Spl... by njohnson7 Path Finder in Security 12-16-2020 0 2	0	2
How do I access my local Splunk enterprise instance from another local computer on my network? Hi Splunkers,I am trying to access my Splunk instance through another computer on my network. I have already added:al... by Marco Communicator in Security 12-15-2020 0 3	0	3
Rename users security ID Hi, i have urgent question. Can i rename security ID of PC without renaming on local PC?I renamed pc after instalatio... by Glace Explorer in Security 12-10-2020 0 1	0	1
Using SAML with multiple idP Currently we are connecting our Splunk Searchheads to our idBroker. The idBroker supports the use of multiple id Prov... by markusspitzli Communicator in Security 12-08-2020 0 1	0	1
Timechart percent count of http status code I have a requirement where I want to show the timechart of 5xx errors percentage by total request.currently I haveind... by orca Explorer in Security 12-08-2020 0 2	0	2
Possibility for IBM ISIM/ISAM integration (authentication and auth.) Global IBM ISIM/ISAM question to the Splunkers: In what ways can Splunk integrate in the field of authentication and ... by Pdingema New Member in Security 12-04-2020 0 0	0	0
Cheat Sheet Splunk ES Hi AllIs there any "Cheat-Sheet" with some common searches for Splunk ES ? by Wallace New Member in Security 12-02-2020 0 1	0	1
Splunk 8.0.0: Sensitive Information disclosure? I have got a pentest results with the following : It was possible to access those endpoints unauthenticated : https:/... by randre New Member in Security 12-02-2020 0 7	0	7
Cyberoam SSL VPN hi, know why i cant access server database using VPN by eszekun New Member in Security 12-01-2020 0 3	0	3
Unable to login SPLUNK trial instance Hello there, I recently created new trial instance for SPLUNK cloud, when i try login to the application it was not a... by pushparajalagir New Member in Security 11-30-2020 0 3	0	3
How to create new user in Splunk with LDAP Authentication LDAP is already configured and i see many users with LDAP authentication.Now i want to create new users with LDAP aut... by alexspunkshell Contributor in Security 11-27-2020 0 3	0	3
Assign default role to users with SAML authentication Hello,Let me explain the use case: we are using SAML as authentication system, and we need to give specific users spe... by alexis11 Observer in Security 11-27-2020 0 0	0	0
Cloud Trial login I am unable to login to a recently created Trial. From My Instances, I do not have the option to INVITE USERS. Also,... by asdasdasdwedfwe Engager in Security 11-23-2020 0 5	0	5
Fraud Monitoring Is anyone using Splunk for their fraud monitoring efforts, whether it be for transactional monitoring of activity, al... by masonF Engager in Security 11-22-2020 2 3	2	3
Cluster Permissions Model I'm sure this is a noob question but here goes. I have used Splunk from the user perspective but now dipping my toes ... by shocko Contributor in Security 11-17-2020 0 3	0	3