Security

Community Activity

Problem with SSO SAML (Splunk 6.5) Splunk issues the HTTP POST to our IdP with the auth request ,on the browser we login to our IdP successfully , submi... by cm248k Explorer in Security 04-01-2020 1 14	1	14
Failed to add all internal indexes to sc_admin role in SplunkCloud I added all the internal indexes to the role of sc_admin in Splunkcloud but it failed.I want to know the solution. by kuniomiura New Member in Security 03-31-2020 0 0	0	0
Force TLS 1.1+ for index replication Our vulnerability scanner keeps hitting on SSLv3 on the port 8080 replication ports of our index cluster. I've added ... by dyeo Engager in Security 03-31-2020 0 3	0	3
Inappropriate authentication error while configuring LDAP Hi All, I have recently LDAP connection on one of our HF, it's giving us the error " ERROR ScopedLDAPConnection - st... by sanjeev543 Communicator in Security 03-31-2020 0 1	0	1
Additional SSL Verification Hey everyone.First time SSL setup (IDX & UF both v8.x) and cert creation (never done before). Had a question about ve... by v_trilo New Member in Security 03-31-2020 0 0	0	0
Cannot Access Splunk UI. Getting XML error for "Error connecting: Connection refused" Hi, Since last 2 days, we have started getting the following error when accessing any of our Splunk URL's. This i... by att35 Builder in Security 03-30-2020 0 6	0	6
Splunk login error- Hosted on EC2(Splunk enterprise through marketplace) I have tried using username-admin and password- but unable to login.Message: if you installed this instance , use the... by samratconsultan New Member in Security 03-28-2020 0 2	0	2
Parsing remoteUser header value I have Splunk 7 with SSO enabled. Is there any way to extract certain value remoteUser header? For example, I want to... by vzabawski Path Finder in Security 03-27-2020 0 0	0	0
\|rest - different results for admin and power roles Hello, Can anyone help me to find the issue and fix it? I need to grant permissions to use rest command to power role... by bmarona Explorer in Security 03-27-2020 0 1	0	1
termsOfServiceDirectory which web.conf should this stanza be placed in, in a distributed environment. Using btool I need to make sure the AUP message pops up and is accepted anytime people log into the web interface on search heads... by swagner1965 Path Finder in Security 03-26-2020 3 8	3	8
can I clone a role? Hi, I want to create new roles in Splunk 6, which are based upon existing roles. Is there a way to clone roles? It's ... by a212830 Champion in Security 03-26-2020 3 5	3	5
Splunk 8.0 upgrade has no web server running Did an upgrade to 8.0 on my development box (Windows w/Splunk 7,.3.1) and the upgrade went without a hitch (as normal... by tyronetv Communicator in Security 03-26-2020 0 13	0	13
mxHotBuckets in Splunk Indexes Hi Guys, What does maxHotBuckets does, Let's say if I don't set it, its value is 3 then will my indexer have 3 hot ... by PramodhKumar Explorer in Security 03-26-2020 0 1	0	1
Can i restrict permissions for the text box ,drilldown inputs?? Hi All,below is my requirement.i want to restrict permissions for the text box in the dashboard.Only the users having... by Nadhiya123 Explorer in Security 03-25-2020 0 11	0	11
How to check status of all SSL certificates in Splunk? All, To start with, I am not good with SSL issues. Second, I inherited this instance of Splunk with no documentation ... by OldManEd Builder in Security 03-25-2020 3 3	3	3
Configuring SAML base role - problem with new user hello We have a role that have permission to view an app, we have configured SAML GROUP to associate an AD group to t... by avishni01 Explorer in Security 03-25-2020 0 0	0	0
First Login Phantom returns 500: Server Error I havedeployed the Phantom OVA and setup IP and server names according to my environment. I go to https://[myphantoms... by damindragunatil Explorer in Security 03-25-2020 2 5	2	5
How to change max limit of event from 10000 bytes in Splunk Cloud ? How to change max limit of event from 10000 bytes in Splunk Cloud ? by ajinkya0106aexp New Member in Security 03-24-2020 0 3	0	3
User unable to login to Splunk A user reported that she is unable to login to Splunk with her credentials. Whereas I could able to login to Splunk w... by pratapa Explorer in Security 03-24-2020 0 5	0	5
Splunk & Microsoft Certificate Authority Has anyone used Splunk to monitor Microsoft CA's? Maybe not an application, but has anyone researched which Event ID'... by peasead Path Finder in Security 03-24-2020 0 2	0	2
Password protected reports from Splunk Hi Folks, Hope you are well!! We want to password protect the Splunk reports while delivering to user emailbox so tha... by rohit1793 SplunkTrust in Security 03-23-2020 0 1	0	1
Need user logon events for 12 months Hi, Following query displays user logon events for the last 10 days. We need user logon events for the last 12 month... by pratapa Explorer in Security 03-23-2020 0 2	0	2
Why are we unable to retrieve the list of all LDAP users? I was looking at my list of users and noticed that there are quite a few users missing that should be there. We are u... by jpetrakovic Explorer in Security 03-23-2020 1 12	1	12
ERROR BTreeCP ~~~~ \snapshot.old: Access is denied. error Getting this error on a few systems... 08-28-2016 22:03:18.924 -0400 ERROR BTreeCP - failed: failed to rename C:\Pr... by cjsweeney1 Explorer in Security 03-19-2020 1 3	1	3
Password hashing in Splunk In one of the file the password seems to be present and the same has been getting ingested into Splunk. So is there a... by anandhalagaras1 Contributor in Security 03-18-2020 0 2	0	2