Security

Community Activity

Splunk as a web application security tool I am relatively new to Splunk as it is really used.My previous usage has all been ad hoc when it was made available t... by logjam01 Engager in Security 11-01-2020 0 1	0	1
Restrict access to apps based on role Hi,I have a question about restricting user/role access to apps.Today I have about 80 apps in my SH. I would like one... by alonsocaio Contributor in Security 10-30-2020 0 1	0	1
How to restrict access to indexed fields I would like to restrict access to a specific indexed field. Here's my scenario: events contain usernamesI use INGES... by jpass Contributor in Security 10-30-2020 0 5	0	5
Missing Logout option - Enterprise license, LDAP Authentication Currently using LDAP authentication, enterprise license for splunk version 7.3.3 I know there was a similar issue in ... by ndoerfler Engager in Security 10-28-2020 0 3	0	3
When uploading a data file, why is the progress bar getting stuck at 100% for a non-admin user? Hi, I'm having an issue uploading files to Splunk as a particular user. When I attempt the upload process, the progr... by khagan Path Finder in Security 10-26-2020 1 6	1	6
Intermediate Certificate Hi,I'm new to creating self-signed SSL certificates. I've been following the Splunk documentation https://docs.splunk... by Pateza New Member in Security 10-26-2020 0 2	0	2
Effective permission for user in multiple roles I have users in multiple roles. Some role have higher permission and with access to a list of indexes. How can I view... by msplunk33 Path Finder in Security 10-26-2020 0 4	0	4
How to secure Splunk with Multi CA How to secure Splunk with Multi CAwe are securing the Splunk Platform with ssl, data flow TOP as following,ufwd(subbr... by eddiiyzhang Engager in Security 10-23-2020 1 1	1	1
2FA authentication I have seen that there is a way to authenticate using the second factor of authentication through RSA and DUO.But I w... by splunkcol Builder in Security 10-22-2020 0 2	0	2
SmartStore: How to encrypt data in-flight with SSL when uploading and downloading to AWS S3? I am trying to better understand the encryption of data in-flight when sending data up to AWS S3 and pulling it back ... by bpdahlb2018 Loves-to-Learn in Security 10-22-2020 0 2	0	2
What should be the proper Unix permissions for files in a locally-written app in $SPLUNK_HOME/etc/apps? We're installing locally-written Splunk apps via puppet and are curious what the proper permissions for a user-writte... by vinceskahan Path Finder in Security 10-21-2020 3 5	3	5
How to tag all events from clients to defined "groups" HelloI would like to add a tag to our Splunk clients by location.I found how to create eventtypes on the server side ... by romainbouajila Path Finder in Security 10-21-2020 0 6	0	6
Best way to segregate hosts Dear all,I'm in the process of grouping hosts by location. I would like it to be based on the hostname.The goal is to... by romainbouajila Path Finder in Security 10-20-2020 0 2	0	2
trusted.pem and private.pem in auth/distServerKeys. How are they generated? As part of an automation activity, we want to connect Search Heads automatically using distsearch.conf as per the g... by koshyk Super Champion in Security 10-20-2020 0 5	0	5
In the searchhead GUI only 1000 available search indexes are shown In Access Management - Role - available search indexes , only 1000 indexes are shown while we have more than 1000 ind... by devopsaab Observer in Security 10-20-2020 0 2	0	2
Splunk linux Hi Splunkers!I'm actually working on root privilege escalations with linux logs and I have limited experience with it... by revanthammineni Path Finder in Security 10-19-2020 0 1	0	1
Splunk Security Essentials onboard data/use case creation Hi Team,We are trying to get data on boarded to splunk security essentials. We do not have a clear visibility to the ... by vinothn Path Finder in Security 10-19-2020 1 2	1	2
Unable to access the index I have created a role and provided the access to indexes for a user. However the user can not search on the index. Ot... by msplunk33 Path Finder in Security 10-16-2020 0 1	0	1
Splunk Admin Password I have renamed passwd.bkg to passwd and restart splunk but still not able to reset my password using admin and change... by hsharry New Member in Security 10-16-2020 0 14	0	14
Unable to ssl secure Splunk web running on EC2 using ELB Hi all,So, we have a Splunk Enterprise running on an ec2 instance and we want to ssl secure the splunk web url.So for... by sushainmagotra Loves-to-Learn Lots in Security 10-15-2020 0 0	0	0
How to find out user device details ? Excuse my knowledge with Splunk how do track user device details Mobile ( Device model , OS version )Browser ( Browse... by jaibalaraman Path Finder in Security 10-13-2020 0 2	0	2
Splunk systemd unit file in versions 7.2.2 and newer - how do I stop this prompting for the root password? (Q&A) As per the various other systemd related answers posts: Is there a systemd unit file for Splunk? Is there a systemd u... by gjanders SplunkTrust in Security 10-12-2020 6 9	6	9
Does Splunk Cloud 8.0.x.x support two factor authentication? Does Splunk Cloud 8.0.x.x support two factor authentication? If so, what are the options? Is there a way to access ... by jlum New Member in Security 10-12-2020 0 1	0	1
Splunk with SAML authentication Hi, I am configuring Splunk access control with SAML onelogin and I have uploaded the onelogin IdP meta data file to... by splunkgk Path Finder in Security 10-09-2020 1 2	1	2
permission on knowledge object Hello,Normal users should see a subset of a field extraction, small set of higher privilled users should be able to s... by KaS New Member in Security 10-09-2020 0 3	0	3