Security

Community Activity

Encrypting vales in Splunk conf file I am writing a modular input in splunk and need to store API key and secret in a .conf file. I see how I can Rea the ... by brent_weaver Builder in Security 02-27-2020 0 1	0	1
How to alert a user when his maximum time window is excedeed Hello, I created a specific role for some users with a defined maximum time window. Hence, these users are not allowe... by alfreddupont012 Engager in Security 02-27-2020 0 2	0	2
Why do nested AD groups not have access to Splunk cloud when everyone else in the AD group does (SAML setup)? I am running into an issue where nested AD groups that are in my Splunk AD group do not get the access that everyone ... by kelstahl8705 Path Finder in Security 02-26-2020 1 5	1	5
Where can we see access/permission issues? We are moving several admin folks to be power users. During the transition we might have permission issue. Where can ... by danielbb Motivator in Security 02-20-2020 0 4	0	4
Encountered the following error while trying to update: Error while postin Salesforce.com Setupで下記エラーが発生しました。対応策を教えてください。 Encountered the following error while trying to update: Error while ... by yshitanda New Member in Security 02-19-2020 0 0	0	0
Feature Request: Splunk Certificate Management GUI While there is ample documentation on certificate generation and application to both Splunk Web, Indexers, and Forwar... by dwchow Engager in Security 02-19-2020 3 2	3	2
Best way to connect to HEC with Java SDK Question: What is the best way to connect to HEC with the Java SDK? SDK JAR Version: 1.6.4.0 Currently, I am using ... by angrydead Explorer in Security 02-19-2020 0 3	0	3
Using Dev Licenses for 6-7TB POC I want to test throughput on a Splunk setup, but I will use a Dev 10GB license, but the traffic will be nearer 6-7TB ... by damindragunatil Explorer in Security 02-19-2020 0 0	0	0
How to encrypt password when creating custom alert actions in Splunk Add-on Builder? Hi all, I am using the custom alert action with the Python script to SSH to our Fortigate firewalls and restart the ... by diwaly2019 New Member in Security 02-18-2020 0 3	0	3
Remove a field from certain roles view Hi Everyone, The scenario here is: Email data being ingested by Splunk. We want to be able to give access to this in... by celdridge1988 Engager in Security 02-18-2020 0 1	0	1
how to kill defunct pid without rebooting the server Splunkd instance is not running bcz of multiple defunct pid are created, even we are killing the PIDs splunk is not ... by raghu_vedic Path Finder in Security 02-17-2020 0 2	0	2
web.conf - updateCheckerBaseURL Hi @ All, i create a little app to set "updateCheckerBaseURL" value to "0". Then i copied it to "/opt/splunk/etc/dep... by pduvofmr Path Finder in Security 02-17-2020 0 1	0	1
Splunk User search limit Is it possible to restrict some of the user/roles from running searches for all time ? by spl_unker Explorer in Security 02-17-2020 0 2	0	2
enable_insecure_login with root endpoint and load balancer Hi all, I need to connect to a dashbaord using enable_insecure_login; I have root endpoint configured as "/splunk". ... by giorgiovolpini New Member in Security 02-17-2020 0 0	0	0
Find out the role of a Splunk server Hello, I have 2 servers on which Splunk is installed. I am able to access the Splunk console using splunk2 server. ... by mjm_bhatiarahul New Member in Security 02-14-2020 0 3	0	3
Restrict user access to specific lookup table I have a lookup table that stores employee data to map employee numbers and departments.In the dashboard I will use t... by mtk15804 New Member in Security 02-14-2020 0 2	0	2
WARN: path=/masterlm/usage: Signature mismatch between license slave=x.x.x.x and this LM. Plz make sure that the pass4SymmKey setting in server.conf, under general is the same for the License Master and all its slaves from ip=x.x.x.x Hi Team, I am getting error notification on Deployer, i have checked with pass4SymmKey there encrytion is same for de... by anupkumar Engager in Security 02-13-2020 0 4	0	4
SSO on OKTA using SAML error message: "Saml response does not contain group information" Hi at all, I have the following problem: We configured SSO with OKTA using SAML. When authenticating we receive from... by Abk New Member in Security 02-12-2020 0 1	0	1
There are many jobs showing as Dispatched at 12/31/69 and keep running? in the job manager This is really strange.I am seeing in the job manager that there are many jobs running with created at date 12/31/69 ... by vrmandadi Builder in Security 02-12-2020 0 12	0	12
capability admin all objects good afternoon I have the following question, there are currently roles in our cluster that have the following re... by efaundez Path Finder in Security 02-12-2020 0 5	0	5
SplunkWeb Broken UI Hi, We have been experiencing broken UI on 3 of our nodes (DS, SHDep, & IDXCM; 2 screenshots below) and the rest see... by morethanyell Builder in Security 02-11-2020 0 0	0	0
Splunk Web is not accessible from remote computers Hello, I have Splunk 8.0.1 installed on Ububntu 18.04.4 LTS. I can connect to port 8000 from the same server with an... by KSluchanko Engager in Security 02-11-2020 0 7	0	7
How to identify an admin who made a change in GPO Hello, Someone made changes to GPO that negatively impacted devices in our environment. I searched event code 4733, ... by rcastello Explorer in Security 02-11-2020 0 2	0	2
Splunk ODBC driver issue :Splunk ODBC: "error code 126: The specified module could not be found (C:\Program Files\Splunk ODBC Driver\lib\SplunkDSII.dll)." I have installed Splunk 8.0 version with Splunk ODBC driver"splunk-odbc_211" Windows Server 2012 R2 Std x64. Windows ... by praveen_ New Member in Security 02-10-2020 0 0	0	0
reassigning ownership for large amount of knowledge objects I see that when i reassigning ownership the schedule wont kick in (next_scheduled_time just reads none), for example ... by sbattista09 Contributor in Security 02-10-2020 0 2	0	2