Security

Community Activity

LDAP Query: Pull the Description and Office fields within AD Hi, I need to pull the description and office fields in active directory in my SPL query. What would be the best sy... by itsmevic Communicator in Security 01-02-2020 0 1	0	1
Can't access Splunk through Local Hostname Hi, I have previously installed Splunk Free and is able to access the Web Interface through my local hostname as so... by isaac_su Engager in Security 01-02-2020 0 7	0	7
Splunkをsystemdサービスとして停止するときの問題について CentOS に 7.2.3 の Splunk Forwarder をインストールし、以下のマニュアルに記載された手順をもとに fowarder を systemd のサービスとして登録しました。 https://docs.splun... by cweiliou_splunk Splunk Employee in Security 12-31-2019 0 2	0	2
Can we produce a list of roles and their resources? Is there a way to produce a list of roles in the system and their associated resources, such as User-level concurrent... by danielbb Motivator in Security 12-27-2019 0 4	0	4
How to change the user roles in .conf files Hello Accidentally I changed the admin role for my admin user in the Splunk UI. By default Admin user - admin role a... by vhharanpositka Path Finder in Security 12-26-2019 0 2	0	2
Anti tampering features to protect Splunk logs themselves? Does Splunk provide measures protecting against / detecting the tampering of the Splunk logs/data? The only thing I c... by kimberlytrayson Path Finder in Security 12-24-2019 0 2	0	2
Interesting... passwd file over rules user-seed.conf Not sure if this has been seen by others and it didn't turn up in my searches... I have a 7.3.3 instance where I for... by reswob4 Builder in Security 12-23-2019 1 1	1	1
Is there is a way to show a certain user’s data to another user in a different SAML/AD group without EVERYONE in the other account seeing it and without creating a separate AD/SAML account in Splunk Cloud using SAML as authentication? Hi there  I am in the process of migrating from Enterprise to Cloud and as I am setting up Splunk roles for the SAM... by kelstahl8705 Path Finder in Security 12-22-2019 0 1	0	1
Can any one help with a search language that could determine system logins after core hours? Can any one help with a search language that could determine system logins after core hours? by essibong1 New Member in Security 12-22-2019 0 1	0	1
OS Impact of ADDON-21209 - Splunk Add-on for Unix and Linux - 'Description' field is not properly extracted from events for service.sh script in CentOS 7 configurations' Our organization would like to deploy the Splunk Add-on for Unix and Linux to gain support for Python 3 on our 7.2.3 ... by sh1pit76 Explorer in Security 12-19-2019 0 2	0	2
SSO without an SAML Hi All, We would like to enable SSO for SPlunk Enterprise instance without using SAML. if any one has tried the same... by shwetas Explorer in Security 12-19-2019 0 1	0	1
Verification of SAML assertion using cert failed I have configured SAML SSO with Onelogin. My splunk app http://:8000/ is redirecting succusfully to Assertion consume... by splunkgk Path Finder in Security 12-19-2019 0 6	0	6
Does Microsoft enabling "LDAP signing" and "LDAP enforcement channel binding" affect Splunk? Microsoft seems to be planning a security release on January 2020 for Windows Server which enables both config by def... by nfutatsugi_splu Splunk Employee in Security 12-18-2019 1 2	1	2
How can I produce a list of users and their roles? How can I produce a list of users and their roles? Maybe a rest call to produce such a list... by danielbb Motivator in Security 12-18-2019 0 6	0	6
マイクロソフト社による、"LDAP 署名"と"LDAP チャネルバインディング" の有効化により、Splunkにどのような影響がありますか？マイクロソフト社によりますと、2020年1月中に "LDAP 署名" と "LDAP チャネルバインディング" の両オプションの有効化を含むセキュリティリリースを計画しているそうです。この変更がSplunkにどのような影響を与えるこ... by nfutatsugi_splu Splunk Employee in Security 12-18-2019 3 1	3	1
Configure SAML SSO with AD FS Splunkの認証方法としてAD FSを用いたSAMLによるSSOを設定しようとしています。以下のサイトを参照したのですが、Windows Server側に設定する情報がなく、何を設定すればよいか困っています。 AD FSを用い... by dt01_2019 New Member in Security 12-17-2019 0 0	0	0
How to change the Splunk Web URL secured by https? Hello, I like to update/rename the Splunk Web URL which is currently secured with HTTPS E.g. -> https://localhost:8... by srami Explorer in Security 12-11-2019 1 10	1	10
Splunk Http Event Collector Socket Error I've been trying for a few days now to setup a HEC on a Splunk Heavy Forwarder and having issues with the splunkd pro... by mcirrici Explorer in Security 12-10-2019 0 1	0	1
SSL error while trying to connect to splunk web from python in CentOS-7 HI, I have installed splunk on CENTOS-7. splunk is opening in web and able to login and do other stuff. But while try... by sawgata12345 Path Finder in Security 12-10-2019 1 10	1	10
Sharing Dashboards between users/roles I have created an app (lv__shared) which has a couple of custom menus and a list of dashboards within each menu. The ... by balcv Contributor in Security 12-09-2019 0 2	0	2
Why doesn't my custom app icon appear immediately after I add the app in Splunk Web? In Splunk 7.3.0, when I add an app via Splunk Web ("Install app from file"), the custom app icon doesn't appear immed... by Graham_Hanningt Builder in Security 12-09-2019 0 11	0	11
Splunk Alert Webhook - Url Authentication Please anyone guide me how to authenticate the request coming from splunk. I didn't see any documents on splunk webh... by su2020 New Member in Security 12-05-2019 0 0	0	0
Is Splunk compatible with Enterprise SSO ? Hello, We would like to use Enterprise SSO to authenticate the users on one of our Splunk platforms. On another pla... by performancemoni Path Finder in Security 12-04-2019 0 1	0	1
How to calculate percentage of usage on VPN i'm trying to build a report of VPN users/systems that are using VPN 80% of the time. Here is what I have so far: i... by rykermurdock77 Explorer in Security 12-03-2019 1 20	1	20
SSLKEYSFILEPASSWORD Hello All, I have internal private certs for our Splunk environment. Currently after I install a UF on Windows or L... by edwardrose Contributor in Security 12-03-2019 0 0	0	0