Security

Community Activity

Unable to login splunk enterprise! Hi Team, i have restarted the Splunk server and i tried to login again with same user name and password. could not a... by 60795761 New Member in Security 02-04-2020 0 2	0	2
sendemail.py script throwing below error on splunk 7.0.0 Search Head Email not send to mail box because of above error in SH Cluster Splunk version :7.0.0 index=_internal source=schedu... by naliniasb Explorer in Security 02-03-2020 0 0	0	0
Splunk App lock, folder encryption mechanism Hi folks, is it possible to do a "folder-lock" mechanism for a splunk app ? Basic requirement is, i dont want my sp... by premforsplunk Explorer in Security 02-03-2020 0 1	0	1
Event not detected by indexer on [splunktcp-ssl] port I configured splunk to ingest logs on port 9338 with SSL enabled. TCP dump on the port shows log data being receive... by oluwoleoyetoke Explorer in Security 02-02-2020 0 5	0	5
Advanced Edit Option not available for users other than Admin Hi, I am the admin for a clustered Splunk environment, we are running Enterprise Splunk version 7.3.2. I have sever... by dickidv New Member in Security 01-31-2020 0 0	0	0
What security settings do I need to setup for Splunk Cloud? I was wondering if there was a page detailing the network security we need to setup? I believe we will just need to ... by khourihan_splun Splunk Employee in Security 01-30-2020 3 3	3	3
Index cluster master -general setup configuration Hi All , When we go to the index cluster master UI->Settings-> general setup tab we can view the whole infra of the... by deepakgaonkar Explorer in Security 01-30-2020 0 1	0	1
I downloaded the trial version of splunk enterprise and I assigned user and power role. I forgot to add Admin. Is there a way to do it? I need to change my user preferences in my account. In settings I cant find the option to edit the already assigned r... by inaam7827 Engager in Security 01-30-2020 0 2	0	2
UF evtx on linux we have UF on Linux machine and we monitor a directory we upload all evtx file to that directory and index them to th... by hmq321 New Member in Security 01-30-2020 0 2	0	2
What is the best practice for managing your SAML cache? etc/system/local/authentication.conf and etc/system/metadata/local.meta both contain many old entries of users that m... by pkeller Contributor in Security 01-30-2020 1 1	1	1
bootstart user Hi, After rebooting the server when I checked splunk services were not running. So I tried to start the splunk servi... by VijaySrrie Builder in Security 01-29-2020 0 6	0	6
Chart of unique user logins per day I feel like an idiot because this should be simple. I'm trying to get a basic graph showing unique user logins per da... by jeck11 Path Finder in Security 01-29-2020 0 4	0	4
show all roles that have existing restrict search terms settings I need help creating a search that will show all the roles in spunk that have a existing restrict search terms. i wo... by sbattista09 Contributor in Security 01-29-2020 0 2	0	2
Splunk app visibility for certain group Hi Experts, How to make any Splunk app visible to only for certain group? For example Splunk DB connect app visible ... by arun_kant_sharm Path Finder in Security 01-29-2020 0 1	0	1
Logon Failures - Different User Accounts - Same Workstation IP Hi, Does anyone have any SPL that looks at multiple logon failures utilizing event codes 672, 675, 676, 4768 and 47... by itsmevic Communicator in Security 01-29-2020 0 2	0	2
Query formatting error. Need help in filtering words from the RAW output. Below is a sample message that am getting from my index. 2020-01-2... by jerinvarghese Communicator in Security 01-28-2020 0 4	0	4
Masquerade as a user? I'm trying to troubleshoot user issues; Is it possible for me to masquerade as a user, so my account, but with their ... by mbrunetto Path Finder in Security 01-24-2020 0 2	0	2
Splunk With SAML Integration : ERROR "Verification of SAML assertion using the IDP's certificate provided failed. Error: Failed to verify signature with cert :/dnbusr1/raomu/splunk/etc/auth/idpCerts/idpCert.pem;" Hi, I am configuring Splunk access control with SAML onelogin and I have uploaded the onelogin IdP meta data file to... by raomu Explorer in Security 01-24-2020 0 4	0	4
Splunk Port 8000 doesn't work Hi i installed splunk 4.2.3-105575 on ubuntu 10.4 x64 without errors. Started splunk as shown below: root@XXXXX:/opt... by silvapin New Member in Security 01-23-2020 0 11	0	11
Configure Licence master as slave? Hello! I have a kind of strange question to ask. I'm working for a client who has it's own environment, with several ... by 3DGjos Communicator in Security 01-22-2020 0 0	0	0
Why does Splunk keep crashing when I try to download software? Hello, my Splunk keeps crashing when I try to download software ever since I added in the [proxy_config] and http:// ... by mrw5641 New Member in Security 01-22-2020 0 5	0	5
Replace root CA for Splunk cluster We have a Splunk cluster running which consists of search heads, indexers, heavy forwarders and other Splunk instance... by HumanPrinter Explorer in Security 01-21-2020 0 3	0	3
Error while posting to url=/servicesNS/nobody/TA-ServiceNow-SecOps/TA-ServiceNow-SecOps_setup/myinstance/sn_instance Hi All, I am getting below error while setting up ServiceNow Security Operation app in Splunk. Error while posting ... by sachingawas Engager in Security 01-20-2020 1 0	1	0
Splunk LDAP authentication Issue - need to click on login multiple times i have configred my splunk deployment (hosted on AWS instances) to use LDAP authentication over ssl, but whenever i t... by soumyasaha25 Contributor in Security 01-17-2020 0 4	0	4
No indication of error in job manager We've had a couple of searches look fine in the job manager, until we click through into the job inspector which indi... by TheSwiney Engager in Security 01-16-2020 0 1	0	1