Security

Community Activity

Wrong Splunk SAML error message for user that does not have an account Hi We have change login for our solution going from LDAP to SAML. Everything works fine, except one small thing. Wh... by jotne Builder in Security 10-29-2019 0 0	0	0
Your session has expired. Log in to return to the system When I am trying to login to my Search Head I am getting the below error under the login page of Splunk : Your sess... by abhayneilam Contributor in Security 10-28-2019 1 10	1	10
Where are scripts located in Splunk? If we write the script, how do we pass authentication in bash? by muizash Path Finder in Security 10-27-2019 0 1	0	1
Example of inactive account activity detected use case? Does anyone have examples of how to use Splunk to check for inactive account activity? by adukes_splunk Splunk Employee in Security 10-25-2019 0 2	0	2
Example of a high volume email activity to non-corporate domains by a user use case? Does anyone have examples of how to use Splunk to check for volume email activity to non-corporate domains? by adukes_splunk Splunk Employee in Security 10-25-2019 0 2	0	2
Example of a batch file write to system32 use case? Does anyone have examples of how to use Splunk to check for batch files written to the Windows system directory? by adukes_splunk Splunk Employee in Security 10-25-2019 0 2	0	2
Example of activity from an expired user? Does anyone have examples of how to use Splunk to check for activity from expired users? by adukes_splunk Splunk Employee in Security 10-25-2019 0 2	0	2
Recover Splunk certifies with the number Is it possible to retrieve a certificate donde in the past? I have a certification as Power User and also as Splunk A... by Carlosbbm New Member in Security 10-24-2019 0 2	0	2
Example of new users taking privileged actions? Does anyone have examples of how to use Splunk to check for new users taking privileged actions? by adukes_splunk Splunk Employee in Security 10-24-2019 0 2	0	2
Example of a prohibited process detected use case? Does anyone have examples of how to use Splunk to check for a prohibited process? by adukes_splunk Splunk Employee in Security 10-24-2019 0 2	0	2
Splunk SDK user access permissions required I've had a couple of python scripts that use the sdk to pull search results running for a couple of years. This week... by reswob4 Builder in Security 10-24-2019 0 0	0	0
Custom authentication.conf for Search Head Cluster Hi, Version - Splunk v7.1.0 Component - Search Head Cluster Background - in our organization, we are using Splunk I... by dustymehul Explorer in Security 10-24-2019 0 1	0	1
ERROR [Errno 111] Connection refused while sending mail to: We are running splunk 4.2.3 on RHEL 5.I am scheduling a job in windows app and email the results to my email id but i... by npandith Explorer in Security 10-23-2019 1 3	1	3
Splunk User Role: How to choose a particular app as default when I login? I logged in to Splunk web URL and i see many Apps , how can i make one app as default so when i login I don't need to... by vijaychandra24 New Member in Security 10-22-2019 0 2	0	2
'Configure Splunk forwarding to use your own certificates' possible documentation error Hi, I'm trying to configure Splunk forwarders and indexers to use our own certificates and while checking the docume... by jorcabro Explorer in Security 10-22-2019 1 2	1	2
Specific Wineventlog (Security) ingestion into Splunk Hi Team, Currently we are ingesting all data from wineventlog Security, Application & System from all Windows Client... by anandhalagarasa Path Finder in Security 10-21-2019 1 2	1	2
Monitor Role Changes in _Audit Trail Audit:[timestamp=10-29-2017 15:55:70.674, user=bob@bob.com, action=edit_user, info=granted object="jerry@jerry.com" o... by lathwal Engager in Security 10-17-2019 4 2	4	2
SSO setup problems Hi all, we are trying to get SSO working through the SAML authentication method but are running into errors that we ... by srichansen Path Finder in Security 10-17-2019 0 3	0	3
Example of web uploads by a user to non-corporate sites use case? Does anyone have examples of how to use Splunk to check for high volume web uploads by a user to non-corporate domain... by adukes_splunk Splunk Employee in Security 10-16-2019 0 2	0	2
Detect installed Firefox extensions Hello, I wanted to reach out to the community to see how users are detecting Firefox extensions that users are insta... by santoshpaga New Member in Security 10-15-2019 0 0	0	0
Proxying issues Hi, I've installed Splunk Trial on my Windows 10 machine. I require to add a proxy server to access the internet on ... by abhsha Engager in Security 10-14-2019 0 6	0	6
Is there a way to clean up local.meta, since role deletion in Splunk is and has been extremely broken? I'm not sure if I trust my bash skills to go through and recursively sed all my very messy local.meta's from old role... by nick405060 Motivator in Security 10-13-2019 0 2	0	2
What are some role-level search restriction? Hello, Assuming I have a role created "myapp_admin_role" and there is a setting for User-level concurrent search job... by krusovice Path Finder in Security 10-09-2019 0 2	0	2
Issue while enabling sse-c on remote store I am enabling smart store on Splunk 7.2.6 with SSE-C. My smart store is working without SSL parameters successfully... by bsrikanthreddy5 Path Finder in Security 10-09-2019 0 1	0	1
Splunk setting roles Hi, I want to set role in Splunk such that user is restricted to only searching. NO admin privileges.. Manager>Role... by standias Explorer in Security 10-08-2019 0 2	0	2