Security

Community Activity

Login attempts not showing up in _audit I use this search: index=_audit \| dedup action \| table action and get these results: GET_PASSWORD Remote token ... by carlkennedy Path Finder in Security 11-15-2020 0 4	0	4
ERROR BTreeCP - checkpoint failed: removal of dir /opt/splunkforwarder/var/lib/splunk/fishbucket/splunk_private_db/snapshot.old failed: Directory not empty Why I am getting "ERROR BTreeCP - checkpoint failed: removal of dir /opt/splunkforwarder/var/lib/splunk/fishbucket/sp... by kishen2017 Path Finder in Security 11-13-2020 4 3	4	3
After launching an AWS instance for Splunk Enterprise AMI, what is the default username/password to access Splunk Web? I've launched an AWS instance for the Splunk Enterprise AMI (https://aws.amazon.com/marketplace/pp/B00PUXWXNE ) with ... by dzlabs Engager in Security 11-13-2020 0 7	0	7
How to enable https? I need to enable HTTPS in my page so I asked the admin of the server and he gave me a .pem file. The .pem file appear... by edrivera3 Builder in Security 11-11-2020 0 3	0	3
How do I configure a custom text on the login screen? Hello Splunkers:How do I configure a custom text "Big Data Analytics" on the login screen? Please help me, Thanks in ... by fuchengcheng Explorer in Security 11-10-2020 1 3	1	3
Permissions to edit Splunk ES dashboards Hi,I would like to edit the default dashboards in Enterprise Security ( Security Domains--> Access, Endpoint, Network... by guruprasadds Engager in Security 11-09-2020 0 2	0	2
Is it possible to disable splunk web access for Splunk API user We have multiple use case where service accounts needs to be connected through Splunk API but we want to make sure se... by orca Explorer in Security 11-04-2020 0 1	0	1
tar: splunk: Cannot mkdir: Permission denied I was watching a module 3 in Training. When I type and enter tar xvzf splunk-8.0.3-a6754d8441bf-Linux-x86_64.tgz -C /... by ehs2020 New Member in Security 11-03-2020 0 3	0	3
Server error below the search bar Hi Splunkers, Need you help to fix the below problem. We recently migrated our standalone search head to the cluste... by thippeshaj Explorer in Security 11-03-2020 0 3	0	3
Splunk as a web application security tool I am relatively new to Splunk as it is really used.My previous usage has all been ad hoc when it was made available t... by logjam01 Engager in Security 11-01-2020 0 1	0	1
Restrict access to apps based on role Hi,I have a question about restricting user/role access to apps.Today I have about 80 apps in my SH. I would like one... by alonsocaio Contributor in Security 10-30-2020 0 1	0	1
How to restrict access to indexed fields I would like to restrict access to a specific indexed field. Here's my scenario: events contain usernamesI use INGES... by jpass Contributor in Security 10-30-2020 0 5	0	5
Missing Logout option - Enterprise license, LDAP Authentication Currently using LDAP authentication, enterprise license for splunk version 7.3.3 I know there was a similar issue in ... by ndoerfler Engager in Security 10-28-2020 0 3	0	3
When uploading a data file, why is the progress bar getting stuck at 100% for a non-admin user? Hi, I'm having an issue uploading files to Splunk as a particular user. When I attempt the upload process, the progr... by khagan Path Finder in Security 10-26-2020 1 6	1	6
Intermediate Certificate Hi,I'm new to creating self-signed SSL certificates. I've been following the Splunk documentation https://docs.splunk... by Pateza New Member in Security 10-26-2020 0 2	0	2
Effective permission for user in multiple roles I have users in multiple roles. Some role have higher permission and with access to a list of indexes. How can I view... by msplunk33 Path Finder in Security 10-26-2020 0 4	0	4
How to secure Splunk with Multi CA How to secure Splunk with Multi CAwe are securing the Splunk Platform with ssl, data flow TOP as following,ufwd(subbr... by eddiiyzhang Engager in Security 10-23-2020 1 1	1	1
2FA authentication I have seen that there is a way to authenticate using the second factor of authentication through RSA and DUO.But I w... by splunkcol Builder in Security 10-22-2020 0 2	0	2
SmartStore: How to encrypt data in-flight with SSL when uploading and downloading to AWS S3? I am trying to better understand the encryption of data in-flight when sending data up to AWS S3 and pulling it back ... by bpdahlb2018 Loves-to-Learn in Security 10-22-2020 0 2	0	2
What should be the proper Unix permissions for files in a locally-written app in $SPLUNK_HOME/etc/apps? We're installing locally-written Splunk apps via puppet and are curious what the proper permissions for a user-writte... by vinceskahan Path Finder in Security 10-21-2020 3 5	3	5
How to tag all events from clients to defined "groups" HelloI would like to add a tag to our Splunk clients by location.I found how to create eventtypes on the server side ... by romainbouajila Path Finder in Security 10-21-2020 0 6	0	6
Best way to segregate hosts Dear all,I'm in the process of grouping hosts by location. I would like it to be based on the hostname.The goal is to... by romainbouajila Path Finder in Security 10-20-2020 0 2	0	2
trusted.pem and private.pem in auth/distServerKeys. How are they generated? As part of an automation activity, we want to connect Search Heads automatically using distsearch.conf as per the g... by koshyk Super Champion in Security 10-20-2020 0 5	0	5
In the searchhead GUI only 1000 available search indexes are shown In Access Management - Role - available search indexes , only 1000 indexes are shown while we have more than 1000 ind... by devopsaab Observer in Security 10-20-2020 0 2	0	2
Splunk linux Hi Splunkers!I'm actually working on root privilege escalations with linux logs and I have limited experience with it... by revanthammineni Path Finder in Security 10-19-2020 0 1	0	1