Security

Community Activity

help with AD user search where user!="*$" Hi, I'm doing searches for account login failures using EventCode="4625". The problem is the search returns a lot o... by sdewar83 Path Finder in Security 09-16-2019 0 2	0	2
Eventgen - ERROR ExecProcessor - message from "python /opt/splunk/etc/apps/SA-Eventgen/bin/modinput_eventgen.py" Hi all, For some reason i have this error in splunkd.log and there are no logs being generated from other application... by astatrial Contributor in Security 09-16-2019 0 12	0	12
curl 35 error SSL connect error Hi, I have installed collectd on a server and I am trying to send metrics using the write_splunk plugin. My server h... by johnjonatan319 Engager in Security 09-16-2019 1 0	1	0
java heap space memory What app is this? for example appname is java Usually for java you can look for the "java -Xmx256m -Xms512m" line w... by 1206chandra Explorer in Security 09-15-2019 0 0	0	0
Enterprise Security ess_admin role vs admin role Deployment: on premise, distributed Splunk Platform version : 7.2.6 Enterprise Security version : 5.3.0 Hello, We a... by gdigrego Path Finder in Security 09-15-2019 1 4	1	4
ignoreOlderThan Invalid for batch input Does ignoreOlderThanstanza in inputs.conf is Invalid for batch input? I am getting error as-"Invalid key in stanza" ... by ips_mandar Builder in Security 09-13-2019 0 1	0	1
Configuring a role for Health Checks? All, I am creating a weekly task for a jr NOC staffed to run the management console's "health check" weekly and not... by daniel333 Builder in Security 09-13-2019 0 0	0	0
ignoreOlderThan Invalid for batch input Does ignoreOlderThanstanza in inputs.conf is Invalid for batch input? I am getting error as-"Invalid key in stanza" ... by ips_mandar Builder in Security 09-13-2019 0 1	0	1
Can I get an overview of how Splunk permissions work? I want to set up an organized system of permissions so we can give the right access to the right data and the right S... by jmulcaster_splu Splunk Employee in Security 09-12-2019 0 1	0	1
check the permissions on the log files which are configured on Splunk Hi, Is there any way to find the file permissions for any file which is configured in Splunk. Let's say, a file ha... by Allampally Path Finder in Security 09-11-2019 0 4	0	4
Splunk web login and logout option missing Hello, We have installed splunk in one of our new servers. everything is fine we can access to web UI but we cannot ... by sathwikr076 Communicator in Security 09-10-2019 0 2	0	2
Example of a public S3 bucket in AWS use case? Does anyone have examples of how to use Splunk to check for a public S3 bucket in AWS? by adukes_splunk Splunk Employee in Security 09-10-2019 0 1	0	1
Splunk Time Selector being compressed in Google Chrome? Super strange, but all of the sudden I seem to be getting a compressed/shortened version of my Splunk time selector. ... by joesrepsolc Communicator in Security 09-10-2019 2 4	2	4
Example of a new application accessing Salesforce.com use case? Does anyone have examples of how to use Splunk to check for a new application accessing Salesforce.com? by adukes_splunk Splunk Employee in Security 09-10-2019 0 1	0	1
SSL certificates on each search heads in cluster Hello, The SSl certs for search heads are expiring but the cert is valid on our F5 load balance for those search hea... by sathwikr076 Communicator in Security 09-10-2019 0 6	0	6
7.3.1: max. number of indizes assigned to a role = 100 we just upgraded from splunk enterprise 7.0.2 to 7.3.1. the gui for assigning indizes has changed and now we see a di... by splunk_arz Explorer in Security 09-10-2019 0 0	0	0
unable to log in to Splunk Enterprise Yesterday I've installed Free Trial Splunk Enterprise on Windows 10 and logged in immediately without any problems. T... by sierpien2019 New Member in Security 09-09-2019 0 1	0	1
Troubleshoot data not getting to splunk I'm sending TCP syslog traffic on a specific port to splunk. The input exists and I am sending it to an index I have ... by rusty009 Path Finder in Security 09-09-2019 0 0	0	0
Splunk Web SSL Certificate Error from 3rd party Hi , I am in a situation , we have 3 search heads clustered using a 3rd party SSL certs placed in web.conf after th... by Prakash493 Communicator in Security 09-06-2019 0 3	0	3
Automatic Role Removal Hi, I wonder if someone can help me please. We allocate user roles via the authroize.conf file with all the setting... by IRHM73 Motivator in Security 09-06-2019 0 3	0	3
How do I restrict which apps are visible to a specific AD group? Hi I have set up an app that is only accessible to a certain AD group. There are a lot of apps on my Splunk instance... by skrknick Engager in Security 09-06-2019 0 4	0	4
Example of an outdated anti-malware use case? Does anyone have examples of how to use Splunk to find systems with outdated anti-malware? by adukes_splunk Splunk Employee in Security 09-05-2019 0 1	0	1
How do you produce access denied errors instead of 404s? When my users click on things they do not have permissions for, they get a 404 error with a picture of a... donkey? h... by nick405060 Motivator in Security 09-05-2019 0 3	0	3
Splunkd Error in certificate validation Hello Team, We are developing our own web portal where we need few data from splunk to be displayed on that web port... by praveenm00 New Member in Security 09-05-2019 0 0	0	0
SSO SAML using ADFS I've tried for the past few days using every article and resource I can to get Splunk to work with SSO, but am ending... by pl2345 Path Finder in Security 09-04-2019 0 0	0	0