Security

Community Activity

How does Splunk alerts about expiration alert when Password Policy Management is enabled? We have enabled Password Policy Management & need to know how will the expiration alert come if we have set 15 days a... by abhijit_mhatre Path Finder in Security 04-17-2020 0 0	0	0
Splunkweb Self-Signed SSL certificates not working with Chrome I followed this guide for setting up self-signed certs with Splunk: https://docs.splunk.com/Documentation/Splunk/7.0... by responsys_cm Builder in Security 04-15-2020 3 4	3	4
What does "default app inherited from" mean in "users" page? In the page "Access Control > Users",most users got "system" in the "default app inherited from" column,but someone g... by slasyang Explorer in Security 04-15-2020 0 2	0	2
Is it possible to get data for last 10 days if i install UF today on any endpoint/Server? Is it possible to get data for last 10 days if i install UF today on any endpoint/Server? I would like to get data ... by rupeshn Explorer in Security 04-15-2020 0 1	0	1
Securing Inter-Splunk-Communication with own certificates fails I am trying to secure master <-> indexer communication with server certificates signed by our own company rootCA. Re... by horsefez Motivator in Security 04-13-2020 0 4	0	4
how to fix "Could not get roles for user that does not exist" hello I am currently configuring SPLUNK with LDAP / AD . Splunk server is installed on a centos 7 . Splu... by extquebec New Member in Security 04-11-2020 0 3	0	3
Structure of server cert for serverCert in web.conf for enabling SSL for Splunk Web Hi , I want to enable SSL for Splunk web with 3rd party certificates provisioned by my company. We have server cert... by vtalanki Path Finder in Security 04-10-2020 0 0	0	0
Unknown splunk cloud role When I run a report of roles that have been modified in our splunk cloud instance I see these entries Date Ti... by randy_moore Path Finder in Security 04-07-2020 0 1	0	1
LDAP connection with AD group group with 3K + plus users Hello Together, I have AD Group with 3000 plus users to be added in to LDAP settings in to splunk, But Users are not... by Gowthamdevaraj New Member in Security 04-06-2020 0 1	0	1
splunkcloud smtp As an o365 admin I have a TLS email connector setup for my splunk cloud instance but I am unable to find the correspo... by trojan_81 Path Finder in Security 04-05-2020 0 0	0	0
Once compressed, Splunk data cannot be changed Once compressed, Splunk data cannot be changed? Can someone guide me to the proper reference article by palisetty Communicator in Security 04-05-2020 0 1	0	1
Splunk LDAP sending huge number of searches every day I have a splunk instance with ldap configuration.We noticed that huge number of authentications are being done on the... by ad077 New Member in Security 04-03-2020 0 2	0	2
New Splunk Enterprise Install, cant open or connect Hi there, I have just had a trail version of Splunk Enterprise installed on my laptop. The install went ok, but I ca... by seanmccloskey New Member in Security 04-03-2020 0 5	0	5
SSL/TLS on a TCP data input? I need to setup a TCP data input and I need to ensure that it is SSL/TLS. I understand that I can add a stanza to an ... by dholmes007 New Member in Security 04-02-2020 0 3	0	3
Secure splunk enterprise cluster deployment with SSL / mutual TLS Hi, We are deploying splunk enterprise in aws and we want to know how and which all components to be ssl secured. Few... by vtalanki Path Finder in Security 04-02-2020 0 0	0	0
Require.js with reverse proxy Hi team. I'm facing problems with my splunk app due to require.js, let me explain myself: My app structure is like th... by wazuhtest Explorer in Security 04-01-2020 0 1	0	1
Problem with SSO SAML (Splunk 6.5) Splunk issues the HTTP POST to our IdP with the auth request ,on the browser we login to our IdP successfully , submi... by cm248k Explorer in Security 04-01-2020 1 14	1	14
Failed to add all internal indexes to sc_admin role in SplunkCloud I added all the internal indexes to the role of sc_admin in Splunkcloud but it failed.I want to know the solution. by kuniomiura New Member in Security 03-31-2020 0 0	0	0
Force TLS 1.1+ for index replication Our vulnerability scanner keeps hitting on SSLv3 on the port 8080 replication ports of our index cluster. I've added ... by dyeo Engager in Security 03-31-2020 0 3	0	3
Inappropriate authentication error while configuring LDAP Hi All, I have recently LDAP connection on one of our HF, it's giving us the error " ERROR ScopedLDAPConnection - st... by sanjeev543 Communicator in Security 03-31-2020 0 1	0	1
Additional SSL Verification Hey everyone.First time SSL setup (IDX & UF both v8.x) and cert creation (never done before). Had a question about ve... by v_trilo New Member in Security 03-31-2020 0 0	0	0
Cannot Access Splunk UI. Getting XML error for "Error connecting: Connection refused" Hi, Since last 2 days, we have started getting the following error when accessing any of our Splunk URL's. This i... by att35 Builder in Security 03-30-2020 0 6	0	6
Splunk login error- Hosted on EC2(Splunk enterprise through marketplace) I have tried using username-admin and password- but unable to login.Message: if you installed this instance , use the... by samratconsultan New Member in Security 03-28-2020 0 2	0	2
Parsing remoteUser header value I have Splunk 7 with SSO enabled. Is there any way to extract certain value remoteUser header? For example, I want to... by vzabawski Path Finder in Security 03-27-2020 0 0	0	0
\|rest - different results for admin and power roles Hello, Can anyone help me to find the issue and fix it? I need to grant permissions to use rest command to power role... by bmarona Explorer in Security 03-27-2020 0 1	0	1