Security

Community Activity

Can I get Splunk user activity alerts that include dashboard used? Current: index=_audit user!="splunk-system-user" user!="n/a" user!="MYUSER" user!=testuser* (action="login attempt")... by nick405060 Motivator in Security 04-19-2019 0 2	0	2
New forwarder: An Admin password is required??? Running V7.1, but just Installed a new forwarder and received this response: This appears to be your first time run... by dpapenbro New Member in Security 04-19-2019 0 5	0	5
JMS modular input 1.5.1 - how to resolve phyton error OSError: [Errno 7] Argument list too long Hi, I have 124 entries configured, but I can only enable 102, and if I enable one after 102, the following error mess... by dbedoya New Member in Security 04-18-2019 0 0	0	0
Upgraded Splunk Enterprise to 7.2 from 6.6. Received error with KV Store but cannot migrate KV Store Tried to migrate KV store using the splunk migrate migrate-kvstore cmd and got another error when looking at the migr... by romulusc New Member in Security 04-18-2019 0 0	0	0
Taking the Power Exam First Can the Power User Exam be taken without taking the User Exam first? by 4stringdave New Member in Security 04-18-2019 0 1	0	1
How do roles inherit capabilities and properties? After having read through some documentation and several discussions, I didn't find out, if roles are being inherited... by adckia New Member in Security 04-17-2019 0 2	0	2
Why the default app is launcher for a new user? A user by the name Greg belongs to an ldap group which is mapped successfully to a role and this role is mapped to a ... by ddrillic Ultra Champion in Security 04-15-2019 0 2	0	2
ProxySSO authentication failed to process groups header Hello, I'm trying to configure Proxy SSO authentication, with PingAccess, for Splunk Enterprise v7.2.5.1. But whatev... by chclemence Explorer in Security 04-15-2019 1 2	1	2
Why is a number getting appended to each line when making changes to password file in Splunk 7? We’ve started testing Splunk 7 and I noticed that when I make changes to the splunk/etc/passwd file and restart splun... by splunkIT Splunk Employee in Security 04-12-2019 0 6	0	6
Why are only some indexes listed in the available indexes pane under roles? Only a fraction of our indexes are listed as available and there is nothing listed under selected. For example: T... by lycollicott Motivator in Security 04-11-2019 2 16	2	16
issue : want to hide/encrypted text password Hi , i have AD server configuration GUI page in my app where i am setting user_id , password, Group in data input . s... by pragycho Loves-to-Learn in Security 04-10-2019 0 5	0	5
How to get list of users removed from LDAP but are still available in Splunk user directories Hi Team, In my implementation splunk is integrated with LDAP authentication, users who left the organizations will b... by newbie2tech Communicator in Security 04-09-2019 0 4	0	4
Access Splunk interface on Heroku website Hi, I'm running a dockerised Splunk on heroku. How do I access the splunk interface through my heroku website or ho... by anj1 New Member in Security 04-08-2019 0 1	0	1
Update the admin password for UF globally We want to change the admin password for all the UF globally. Is it possible to change it through the deployment serv... by tlam_splunk Splunk Employee in Security 04-08-2019 0 2	0	2
How do I connect to Active Directory groups without Splunk for Windows Infrastructure or Splunk for Microsoft Exchange? I am trying to use Active Directory group membership to filter my events. Our work has nothing to do with Windows or ... by cblanton Communicator in Security 04-05-2019 0 3	0	3
Network Search - How do I search for network addresses without using CIDR? Hi All, Am pretty new to this tool but excited about the capability of the tool. Am trying to search a network in my... by cybercop007 New Member in Security 04-04-2019 0 1	0	1
How can I allow users to change permissions of all objects within an app? I want to create a system where my users can manage an app self-service. I am having trouble finding a way to allow a... by unls New Member in Security 04-03-2019 0 1	0	1
Limitations for Splunk Cloud outgoing traffic We will be using a Splunk app (https://splunkbase.splunk.com/app/4422/ disclaimer: we made this app) to send out aler... by cfcsolutions Engager in Security 04-03-2019 0 1	0	1
Why am I unable to delete calculated fields from Splunk Web? Hi I am having an issue with deleting/editing calculated fields in Splunk Web. Any idea, how I can remove these two?... by akawacz Path Finder in Security 04-03-2019 0 2	0	2
delete_by_keyword not working Want to grant delete permissions for a non admin account for specific prod-test-* indexes Created a new role and map... by athorat Communicator in Security 04-03-2019 0 3	0	3
How to join Pearsonvue spluk I have a splunk account. I want to create a pearsonvue-splunk account. You will need your Splunk ID to complete the... by jsryu0247 Engager in Security 03-29-2019 0 2	0	2
How do you make a user never log out? In our Splunk Cloud install, we use SAML authentication for all regular users. However, we have also defined an inter... by maxnewell New Member in Security 03-28-2019 0 1	0	1
When can we expect splunk to support 2Factor Authentication for "Siteminder" When can we expect splunk to support 2Factor Authentication for "Siteminder" using SAML.... Is it going to be in 6.4... by anushareddy6767 Explorer in Security 03-28-2019 0 2	0	2
Why does Saml response not contain group information? hiI am trying setup same for Splunk Enterprise instance in my local using okta . I am getting below error from Splunk... by sadpan New Member in Security 03-28-2019 0 2	0	2
SSLv3 certificate error from the cluster master I select validate configuration bundle and after some time i recieve below error message: "Bu... by rashid47010 Communicator in Security 03-26-2019 0 1	0	1