Security

Community Activity

Cloudwatch log streaming to Splunk on On-premise We are planning to use Splunk Add on for AWS for streaming AWS cloudwatch logs. How can we ensure security of data st... by Aravind_1205 New Member in Security 09-11-2020 0 1	0	1
Newly created LDAP group not accepting created roles We have a few users that need access to application logs. We have our active directory admins create a group and once... by jcgever Explorer in Security 09-10-2020 0 1	0	1
Securing Splunk HEC with LetsEncrypt Hi all! I'm trying to enable SSL for my HEC ingestor on a small, centralized Splunk Enterprise deployment. I used Let... by AxelPersinger Explorer in Security 09-09-2020 0 5	0	5
changing the size of an index Hi, I need to change the size of an index, as it's eating up to much space. Is it as simple as changing it's max siz... by a212830 Champion in Security 09-09-2020 0 3	0	3
Tcp data input and ssl I have configured /local/inputs.confg file for tcp input data for ssl as suggested in documents. But after restart th... by Hari Observer in Security 09-08-2020 0 5	0	5
web.conf missing & splunkweb doesnt show up in splunk status Hi: I recently installed Splunk 8.0 on CentOS 8. Post successful installation I am unable to launch Splunk web interf... by celina11 Observer in Security 09-08-2020 0 9	0	9
The Splunk web interface is not opening (RHEL 7.x server using sudo root access). I’ve installed a splunk entreprise (evaluation) in RHEL 7.x server using sudo root access. But The Splunk web interfa... by splunking100 New Member in Security 09-05-2020 0 5	0	5
Account lockout when using LDAP authentication for users? We have our authentication tied to AD using the LDAP strategy. Password complexity and lifetime is, as a result, ha... by chris_barrett SplunkTrust in Security 09-05-2020 0 3	0	3
Best practices and questions about network configurations with Splunk Enterprise in a Kubernetes environment? Greetings, I'm working on ways to set up Splunk containers inside Kubernetes. I wanted to ask here if anybody has ev... by chris94089 Path Finder in Security 09-02-2020 0 0	0	0
How to enable TCP Data Input with SSL? Hi 7.1.2 Splunk on Windows, I need to send log through TCP with SSL. How can I enable TCP SSL? Thanks Regards by emily12234 Explorer in Security 09-01-2020 0 3	0	3
Authentication tokens splunk 7.0.2 HelloI was tasked with setting up "Authentication Tokens" on a splunk 7.0.2 instance. I can not seem to find any docu... by emmdominguez Observer in Security 08-31-2020 0 2	0	2
Does btool logs its usage somewhere? All, Looking at some windows logs and came across the following commands ran on two separate computers. The "--no-lo... by jordanking1992 Path Finder in Security 08-31-2020 0 5	0	5
How should we handle SQL Server audit data that reaches the wineventlog index? For SQL Server audit information, we ended up sending the data to the wineventlog index as application events.This da... by danielbb Motivator in Security 08-28-2020 0 1	0	1
Unable to login to splunk enterprise with default password? Hi, I have downloaded splunk enterprise freeware for windows. the installation was fine. Unable to login to splunk w... by MousumiSahoo New Member in Security 08-25-2020 0 3	0	3
Enable SHA256 Hello again, hope not to disturbI need to activate SHA256 encryptionWhat I have investigated is a function that does ... by splunkcol Builder in Security 08-24-2020 0 4	0	4
bin directory has been deleted HI By mistake bin folder was deleted on one of the indexer.Is there any way to get it back. We dont have backup for ... by nagamadhupriyan Loves-to-Learn Lots in Security 08-24-2020 0 4	0	4
API Token authentication Hi ,am trying to access : curl -k https://localhost:8089/services/auth/login -d username=admin -d password=foobarhttp... by Rdoggala Loves-to-Learn Lots in Security 08-23-2020 0 10	0	10
Browser type Display issues with Useragent I have a query which is giving me different types of browser stats but when I try to display that in a pie chart it s... by puneetkharband1 Path Finder in Security 08-22-2020 1 3	1	3
Splunk Enterprise integration with Multiple AzureAD for AUthentication Hi Experts...We have a requirement where we need to integrate Multiple Azure AD with Splunk Enterprise for Authentica... by shwetas Explorer in Security 08-19-2020 0 0	0	0
Creating new CSR unable to find shared library libssl.so.0.9.8 I am try to generate a CSR on CentOS 6 based on the Splunk admin documentation for "Generate a CSR". I used the follo... by jason_hubbard Path Finder in Security 08-18-2020 1 6	1	6
What is N/A in the user field? I issued this search: index="_audit" \| top user limit="1000" attempting to see the users on my system. Some of the ou... by IT_Bullgod Splunk Employee in Security 08-17-2020 1 2	1	2
Traking every configurations on SPLUNK instances (SH, IX, UF) Hello, I need your recommandations and your advices about the configurations for tracking the changements and the mod... by Nessrine Loves-to-Learn in Security 08-14-2020 0 4	0	4
Having Difficulty with SSL certs - Splunk 8 on prem Hello, and thanks for reading this.Having issues with securing the web site for our on-prem Splunk 8 Enterprise insta... by BrianS Observer in Security 08-14-2020 0 4	0	4
Use case to detect malicious activity in Splunk indexer which is in a weak network Hi All,kindly give your thoughts on below questions.1.How to create high level use case to detect malicious activity ... by Aleena Explorer in Security 08-13-2020 0 5	0	5
Certification: do i need to attend official Splunk courses ? Hello Team, Are the official Splunk courses the only way to get certified ?For example:https://www.splunk.com/en_us/t... by teknet9 Path Finder in Security 08-13-2020 0 7	0	7