Security

Community Activity

Splunk enterprise webserver not available after SSL install I'm doing a new install on a Linux Centos 7 VM . We have our own CA that issue our certs. After installing my SSL Cer... by afolabia Path Finder in Security 02-06-2020 0 2	0	2
IDP failed to authenticate request. A selection of users in Bogota, Colombia are getting: IDP failed to authenticate request. Status code="Responder" Ch... by mcullen4 New Member in Security 02-06-2020 0 4	0	4
After creating a user, error shows" Cannot create user that already exists"? thought I created a user, but it's not there. then creating it, the message Cannot create user that already exists... by scott_sackrider Explorer in Security 02-06-2020 0 5	0	5
Splunk with reverse proxy. After Authenticating, not able to see logs (Search could not found) Hi All, We'v implemented reverse proxy in our environment for authentication. We're able to login thorough our card ... by rupeshn Explorer in Security 02-06-2020 0 1	0	1
authentication method in a query on splunk Hey everyone, Is there a way to check for which kind of authentication method is being used by splunk in a log? (Sp... by rsaude Path Finder in Security 02-05-2020 0 9	0	9
How to integrate kerberos with our apps? Hi Splunkers, Any procedure how configure the splunk application. Our scenario is : Client has kerberos as the singl... by sarvesh_11 Communicator in Security 02-05-2020 0 0	0	0
How to set different frozen locations for each indexer on a distributed environment We am trying to roll of the frozen data from three indexers to a NFS mount directory which contains three sub-directo... by arrangineni Path Finder in Security 02-04-2020 0 2	0	2
help with dashboard authorizations needed Hello, I have following case: I created a dashboard and an App for it and a role allowing only "read" of my dashboar... by damucka Builder in Security 02-04-2020 0 3	0	3
postfix and /var/spool/postfix/maildrop directory are having issues on my Splunk server HI My system admins are having issues with the Splunk server on the /var. They are saving it is heavily used. (ONLY ... by robertlynch2020 Influencer in Security 02-04-2020 0 3	0	3
Splunk release for exit on the internet Folks, I would like a help from you, here in the company where I work, Splunk has no way out of the internet. After... by erlindemberg Explorer in Security 02-04-2020 0 5	0	5
Unable to login splunk enterprise! Hi Team, i have restarted the Splunk server and i tried to login again with same user name and password. could not a... by 60795761 New Member in Security 02-04-2020 0 2	0	2
sendemail.py script throwing below error on splunk 7.0.0 Search Head Email not send to mail box because of above error in SH Cluster Splunk version :7.0.0 index=_internal source=schedu... by naliniasb Explorer in Security 02-03-2020 0 0	0	0
Splunk App lock, folder encryption mechanism Hi folks, is it possible to do a "folder-lock" mechanism for a splunk app ? Basic requirement is, i dont want my sp... by premforsplunk Explorer in Security 02-03-2020 0 1	0	1
Event not detected by indexer on [splunktcp-ssl] port I configured splunk to ingest logs on port 9338 with SSL enabled. TCP dump on the port shows log data being receive... by oluwoleoyetoke Explorer in Security 02-02-2020 0 5	0	5
Advanced Edit Option not available for users other than Admin Hi, I am the admin for a clustered Splunk environment, we are running Enterprise Splunk version 7.3.2. I have sever... by dickidv New Member in Security 01-31-2020 0 0	0	0
What security settings do I need to setup for Splunk Cloud? I was wondering if there was a page detailing the network security we need to setup? I believe we will just need to ... by khourihan_splun Splunk Employee in Security 01-30-2020 3 3	3	3
Index cluster master -general setup configuration Hi All , When we go to the index cluster master UI->Settings-> general setup tab we can view the whole infra of the... by deepakgaonkar Explorer in Security 01-30-2020 0 1	0	1
I downloaded the trial version of splunk enterprise and I assigned user and power role. I forgot to add Admin. Is there a way to do it? I need to change my user preferences in my account. In settings I cant find the option to edit the already assigned r... by inaam7827 Engager in Security 01-30-2020 0 2	0	2
UF evtx on linux we have UF on Linux machine and we monitor a directory we upload all evtx file to that directory and index them to th... by hmq321 New Member in Security 01-30-2020 0 2	0	2
What is the best practice for managing your SAML cache? etc/system/local/authentication.conf and etc/system/metadata/local.meta both contain many old entries of users that m... by pkeller Contributor in Security 01-30-2020 1 1	1	1
bootstart user Hi, After rebooting the server when I checked splunk services were not running. So I tried to start the splunk servi... by VijaySrrie Builder in Security 01-29-2020 0 6	0	6
Chart of unique user logins per day I feel like an idiot because this should be simple. I'm trying to get a basic graph showing unique user logins per da... by jeck11 Path Finder in Security 01-29-2020 0 4	0	4
show all roles that have existing restrict search terms settings I need help creating a search that will show all the roles in spunk that have a existing restrict search terms. i wo... by sbattista09 Contributor in Security 01-29-2020 0 2	0	2
Splunk app visibility for certain group Hi Experts, How to make any Splunk app visible to only for certain group? For example Splunk DB connect app visible ... by arun_kant_sharm Path Finder in Security 01-29-2020 0 1	0	1
Logon Failures - Different User Accounts - Same Workstation IP Hi, Does anyone have any SPL that looks at multiple logon failures utilizing event codes 672, 675, 676, 4768 and 47... by itsmevic Communicator in Security 01-29-2020 0 2	0	2