Security

Community Activity

Does Splunk LDAP support STARTTLS? According to Tenable we will have to disable LDAPS soon. Is it possible to use STARTTLS on LDAP port in Splunk instea... by mpavlas Explorer in Security 12-02-2019 0 4	0	4
File Precedence in splunk Dear All, When i was going through the document of splunk related to file precedence. https://docs.splunk.com/Docum... by santosh11 New Member in Security 11-30-2019 0 1	0	1
Why do we get the exited with code 255 error for each indexer? When running \| datamodel Intrusion_Detection search I get the following error message for each indexer - [<indexer ... by danielbb Motivator in Security 11-29-2019 0 4	0	4
Error in 'litsearch' command During trial licence I am facing below error:- Error in 'litsearch' command: Your Splunk license expired or you have... by jindalnitin20 New Member in Security 11-28-2019 0 1	0	1
Can we have Splunk LDAP integration working in LDAP HA setup? Hi All, We have a primary and a secondary LDAP server that we need to configure with our Splunk instance. If primary... by newbie2tech Communicator in Security 11-27-2019 0 8	0	8
Encrypt & Decrypt password in custom alert Hi Team, We want to encrypt the password that we are using in custom alert, is there any splunk library in python to... by manish_singh_77 Builder in Security 11-25-2019 0 5	0	5
Getting an issue where Splunk hosts can't reach the License Master Getting this error from all my Splunk hosts after adding SSL settings in web.conf: LMTracker - failed to send rows r... by yspade5 New Member in Security 11-23-2019 0 10	0	10
What is causing an incomplete index list for role creation? Hi All, We recently upgraded to Splunk Enterprise vesion 7.3.1.1 and we're trying to add new roles to the instance. ... by jpvalenc Path Finder in Security 11-22-2019 1 5	1	5
500 Internal Server Error Good morning, I am trying to figure out an error 500 error on 6 new Centos 7 servers. Here is my scenario: Splunk Web... by aoleske Path Finder in Security 11-21-2019 0 9	0	9
Why am I getting "HTTP Error 404. The requested resource is not found." trying to open Splunk (localhost:8000) after installation? Hi, I just installed Splunk for the first time. When trying to open Splunk (localhost:8000) it just fails and I get... by kimche Path Finder in Security 11-21-2019 1 19	1	19
Permissions on /var/log To maintain correct permissions how do you allow for splunk to read /var/log? I keep getting the following error 06-... by rmcook84 Explorer in Security 11-20-2019 5 12	5	12
LDAP authentication configuration in a distributed environment Good morning all, Which one is the right place to configure LDAP authentication in a distributed environment? Confi... by borja_luaces New Member in Security 11-20-2019 0 1	0	1
Developer used port 8089 for data, help? I can't seem to find anything on this, forgive me if a duplicate, I've been checking. My company is deploying a newer... by krisblouch New Member in Security 11-20-2019 0 1	0	1
Only 100 indexes are visible on the indexes tab in the role Greetings, I am using Splunk version 7.3.2 (c60db69f8e32) and found a limitation in assigning indexes to a function:... by marcus_santos_s Path Finder in Security 11-19-2019 0 1	0	1
What is the splunk update services address for a Firewall? I need to understand what methodology Splunk applies in order to update. This is to allow updates through a Firewall.... by jbradbury6p6 New Member in Security 11-19-2019 0 1	0	1
Remote desktop license manager data in Splunk Hi Team, Is there any way we can remote desktop license manger data in splunk, requirement is to create alert whenev... by shugup2923 Path Finder in Security 11-18-2019 0 4	0	4
Does Splunk support oAuth 2.0 single sign-on? Does Splunk supports oAuth2.0 based Single-Sign-on? If it is, does it supports both LDAP and Single-sign-on authen... by ankithreddy777 Contributor in Security 11-18-2019 0 6	0	6
Bug report: # in the Name of a Role causes error Hi everyone, Splunk doesn't seem to have a proper bug reporting/tracking system, so I'll report it here: Using the #... by infosecmanes New Member in Security 11-18-2019 0 1	0	1
Limit access to parts of indexes Situation: Index 1, Role 1 Index 2, Role 2 Index 3, Role 3 .... Etc. Now I need a new role which give full access t... by JensT Communicator in Security 11-15-2019 0 8	0	8
Is it possible to suppress errors for lookups that are intentionally hidden from certain users? We have (here at the University) some course dashboards we’re working on. The source data has obfuscated userIDs, and... by wryanthomas Contributor in Security 11-15-2019 0 5	0	5
Permission denied when starting splunk Starting Splunk... Cannot open file=/opt/splunk/etc/system/local/server.conf for parsing: Permission denied Cannot cr... by CletisNPT Explorer in Security 11-14-2019 1 5	1	5
How did forwarder use management port? Hi, splunkers: I assume that there are lots forwarder in a environment but the forward port 9997 and management port... by aojie654 Path Finder in Security 11-11-2019 0 3	0	3
Where do the assets uploads through Splunk Web gets saved in Splunk Instance? When I upload a file say css, js etc using the Splunk web(ie through 'App Name'->Edit properties->Upload File), where... by jeswin96 Engager in Security 11-11-2019 0 2	0	2
Constant re-authentication after SSO migration After our SSO migration, users have reported instances where a single tab will re-authenticate which causes a cascadi... by tjago11 Communicator in Security 11-08-2019 3 21	3	21
Phantom Password Policy What is the effect of implementing a password policy on users with the "Admin" role and "Automation" role? Does imple... by maangellamatini Explorer in Security 11-08-2019 0 1	0	1