Security

Community Activity

How to identify an admin who made a change in GPO Hello, Someone made changes to GPO that negatively impacted devices in our environment. I searched event code 4733, ... by rcastello Explorer in Security 02-11-2020 0 2	0	2
Splunk ODBC driver issue :Splunk ODBC: "error code 126: The specified module could not be found (C:\Program Files\Splunk ODBC Driver\lib\SplunkDSII.dll)." I have installed Splunk 8.0 version with Splunk ODBC driver"splunk-odbc_211" Windows Server 2012 R2 Std x64. Windows ... by praveen_ New Member in Security 02-10-2020 0 0	0	0
reassigning ownership for large amount of knowledge objects I see that when i reassigning ownership the schedule wont kick in (next_scheduled_time just reads none), for example ... by sbattista09 Contributor in Security 02-10-2020 0 2	0	2
How to restrict from accessing only their apps? Now all apps are available to all users ? We need to restrict a role to one app, No other roles should be able to view this. by alankit New Member in Security 02-07-2020 0 3	0	3
Disable local user login bypass Hi, I have enabled SSO authentication for my splunk instance. However, I am still able to login as local user with e... by riyastk Observer in Security 02-07-2020 0 3	0	3
Splunk enterprise webserver not available after SSL install I'm doing a new install on a Linux Centos 7 VM . We have our own CA that issue our certs. After installing my SSL Cer... by afolabia Path Finder in Security 02-06-2020 0 2	0	2
IDP failed to authenticate request. A selection of users in Bogota, Colombia are getting: IDP failed to authenticate request. Status code="Responder" Ch... by mcullen4 New Member in Security 02-06-2020 0 4	0	4
After creating a user, error shows" Cannot create user that already exists"? thought I created a user, but it's not there. then creating it, the message Cannot create user that already exists... by scott_sackrider Explorer in Security 02-06-2020 0 5	0	5
Splunk with reverse proxy. After Authenticating, not able to see logs (Search could not found) Hi All, We'v implemented reverse proxy in our environment for authentication. We're able to login thorough our card ... by rupeshn Explorer in Security 02-06-2020 0 1	0	1
authentication method in a query on splunk Hey everyone, Is there a way to check for which kind of authentication method is being used by splunk in a log? (Sp... by rsaude Path Finder in Security 02-05-2020 0 9	0	9
How to integrate kerberos with our apps? Hi Splunkers, Any procedure how configure the splunk application. Our scenario is : Client has kerberos as the singl... by sarvesh_11 Communicator in Security 02-05-2020 0 0	0	0
How to set different frozen locations for each indexer on a distributed environment We am trying to roll of the frozen data from three indexers to a NFS mount directory which contains three sub-directo... by arrangineni Path Finder in Security 02-04-2020 0 2	0	2
help with dashboard authorizations needed Hello, I have following case: I created a dashboard and an App for it and a role allowing only "read" of my dashboar... by damucka Builder in Security 02-04-2020 0 3	0	3
postfix and /var/spool/postfix/maildrop directory are having issues on my Splunk server HI My system admins are having issues with the Splunk server on the /var. They are saving it is heavily used. (ONLY ... by robertlynch2020 Influencer in Security 02-04-2020 0 3	0	3
Splunk release for exit on the internet Folks, I would like a help from you, here in the company where I work, Splunk has no way out of the internet. After... by erlindemberg Explorer in Security 02-04-2020 0 5	0	5
Unable to login splunk enterprise! Hi Team, i have restarted the Splunk server and i tried to login again with same user name and password. could not a... by 60795761 New Member in Security 02-04-2020 0 2	0	2
sendemail.py script throwing below error on splunk 7.0.0 Search Head Email not send to mail box because of above error in SH Cluster Splunk version :7.0.0 index=_internal source=schedu... by naliniasb Explorer in Security 02-03-2020 0 0	0	0
Splunk App lock, folder encryption mechanism Hi folks, is it possible to do a "folder-lock" mechanism for a splunk app ? Basic requirement is, i dont want my sp... by premforsplunk Explorer in Security 02-03-2020 0 1	0	1
Event not detected by indexer on [splunktcp-ssl] port I configured splunk to ingest logs on port 9338 with SSL enabled. TCP dump on the port shows log data being receive... by oluwoleoyetoke Explorer in Security 02-02-2020 0 5	0	5
Advanced Edit Option not available for users other than Admin Hi, I am the admin for a clustered Splunk environment, we are running Enterprise Splunk version 7.3.2. I have sever... by dickidv New Member in Security 01-31-2020 0 0	0	0
What security settings do I need to setup for Splunk Cloud? I was wondering if there was a page detailing the network security we need to setup? I believe we will just need to ... by khourihan_splun Splunk Employee in Security 01-30-2020 3 3	3	3
Index cluster master -general setup configuration Hi All , When we go to the index cluster master UI->Settings-> general setup tab we can view the whole infra of the... by deepakgaonkar Explorer in Security 01-30-2020 0 1	0	1
I downloaded the trial version of splunk enterprise and I assigned user and power role. I forgot to add Admin. Is there a way to do it? I need to change my user preferences in my account. In settings I cant find the option to edit the already assigned r... by inaam7827 Engager in Security 01-30-2020 0 2	0	2
UF evtx on linux we have UF on Linux machine and we monitor a directory we upload all evtx file to that directory and index them to th... by hmq321 New Member in Security 01-30-2020 0 2	0	2
What is the best practice for managing your SAML cache? etc/system/local/authentication.conf and etc/system/metadata/local.meta both contain many old entries of users that m... by pkeller Contributor in Security 01-30-2020 1 1	1	1