Security

Community Activity

authentication method in a query on splunk Hey everyone, Is there a way to check for which kind of authentication method is being used by splunk in a log? (Sp... by rsaude Path Finder in Security 02-05-2020 0 9	0	9
How to integrate kerberos with our apps? Hi Splunkers, Any procedure how configure the splunk application. Our scenario is : Client has kerberos as the singl... by sarvesh_11 Communicator in Security 02-05-2020 0 0	0	0
How to set different frozen locations for each indexer on a distributed environment We am trying to roll of the frozen data from three indexers to a NFS mount directory which contains three sub-directo... by arrangineni Path Finder in Security 02-04-2020 0 2	0	2
help with dashboard authorizations needed Hello, I have following case: I created a dashboard and an App for it and a role allowing only "read" of my dashboar... by damucka Builder in Security 02-04-2020 0 3	0	3
postfix and /var/spool/postfix/maildrop directory are having issues on my Splunk server HI My system admins are having issues with the Splunk server on the /var. They are saving it is heavily used. (ONLY ... by robertlynch2020 Influencer in Security 02-04-2020 0 3	0	3
Splunk release for exit on the internet Folks, I would like a help from you, here in the company where I work, Splunk has no way out of the internet. After... by erlindemberg Explorer in Security 02-04-2020 0 5	0	5
Unable to login splunk enterprise! Hi Team, i have restarted the Splunk server and i tried to login again with same user name and password. could not a... by 60795761 New Member in Security 02-04-2020 0 2	0	2
sendemail.py script throwing below error on splunk 7.0.0 Search Head Email not send to mail box because of above error in SH Cluster Splunk version :7.0.0 index=_internal source=schedu... by naliniasb Explorer in Security 02-03-2020 0 0	0	0
Splunk App lock, folder encryption mechanism Hi folks, is it possible to do a "folder-lock" mechanism for a splunk app ? Basic requirement is, i dont want my sp... by premforsplunk Explorer in Security 02-03-2020 0 1	0	1
Event not detected by indexer on [splunktcp-ssl] port I configured splunk to ingest logs on port 9338 with SSL enabled. TCP dump on the port shows log data being receive... by oluwoleoyetoke Explorer in Security 02-02-2020 0 5	0	5
Advanced Edit Option not available for users other than Admin Hi, I am the admin for a clustered Splunk environment, we are running Enterprise Splunk version 7.3.2. I have sever... by dickidv New Member in Security 01-31-2020 0 0	0	0
What security settings do I need to setup for Splunk Cloud? I was wondering if there was a page detailing the network security we need to setup? I believe we will just need to ... by khourihan_splun Splunk Employee in Security 01-30-2020 3 3	3	3
Index cluster master -general setup configuration Hi All , When we go to the index cluster master UI->Settings-> general setup tab we can view the whole infra of the... by deepakgaonkar Explorer in Security 01-30-2020 0 1	0	1
I downloaded the trial version of splunk enterprise and I assigned user and power role. I forgot to add Admin. Is there a way to do it? I need to change my user preferences in my account. In settings I cant find the option to edit the already assigned r... by inaam7827 Engager in Security 01-30-2020 0 2	0	2
UF evtx on linux we have UF on Linux machine and we monitor a directory we upload all evtx file to that directory and index them to th... by hmq321 New Member in Security 01-30-2020 0 2	0	2
What is the best practice for managing your SAML cache? etc/system/local/authentication.conf and etc/system/metadata/local.meta both contain many old entries of users that m... by pkeller Contributor in Security 01-30-2020 1 1	1	1
bootstart user Hi, After rebooting the server when I checked splunk services were not running. So I tried to start the splunk servi... by VijaySrrie Builder in Security 01-29-2020 0 6	0	6
Chart of unique user logins per day I feel like an idiot because this should be simple. I'm trying to get a basic graph showing unique user logins per da... by jeck11 Path Finder in Security 01-29-2020 0 4	0	4
show all roles that have existing restrict search terms settings I need help creating a search that will show all the roles in spunk that have a existing restrict search terms. i wo... by sbattista09 Contributor in Security 01-29-2020 0 2	0	2
Splunk app visibility for certain group Hi Experts, How to make any Splunk app visible to only for certain group? For example Splunk DB connect app visible ... by arun_kant_sharm Path Finder in Security 01-29-2020 0 1	0	1
Logon Failures - Different User Accounts - Same Workstation IP Hi, Does anyone have any SPL that looks at multiple logon failures utilizing event codes 672, 675, 676, 4768 and 47... by itsmevic Communicator in Security 01-29-2020 0 2	0	2
Query formatting error. Need help in filtering words from the RAW output. Below is a sample message that am getting from my index. 2020-01-2... by jerinvarghese Communicator in Security 01-28-2020 0 4	0	4
Masquerade as a user? I'm trying to troubleshoot user issues; Is it possible for me to masquerade as a user, so my account, but with their ... by mbrunetto Path Finder in Security 01-24-2020 0 2	0	2
Splunk With SAML Integration : ERROR "Verification of SAML assertion using the IDP's certificate provided failed. Error: Failed to verify signature with cert :/dnbusr1/raomu/splunk/etc/auth/idpCerts/idpCert.pem;" Hi, I am configuring Splunk access control with SAML onelogin and I have uploaded the onelogin IdP meta data file to... by raomu Explorer in Security 01-24-2020 0 4	0	4
Splunk Port 8000 doesn't work Hi i installed splunk 4.2.3-105575 on ubuntu 10.4 x64 without errors. Started splunk as shown below: root@XXXXX:/opt... by silvapin New Member in Security 01-23-2020 0 11	0	11