Security

Security
Community Activity
nick405060
Current: index=_audit user!="splunk-system-user" user!="n/a" user!="MYUSER" user!=testuser* (action="login attempt")...
by nick405060 Motivator in Security 04-19-2019
0 2
0
2
dpapenbro
Running V7.1, but just Installed a new forwarder and received this response: This appears to be your first time run...
by dpapenbro New Member in Security 04-19-2019
0 5
0
5
dbedoya
Hi, I have 124 entries configured, but I can only enable 102, and if I enable one after 102, the following error mess...
by dbedoya New Member in Security 04-18-2019
0 0
0
0
romulusc
Tried to migrate KV store using the splunk migrate migrate-kvstore cmd and got another error when looking at the migr...
by romulusc New Member in Security 04-18-2019
0 0
0
0
4stringdave
Can the Power User Exam be taken without taking the User Exam first?
by 4stringdave New Member in Security 04-18-2019
0 1
0
1
adckia
After having read through some documentation and several discussions, I didn't find out, if roles are being inherited...
by adckia New Member in Security 04-17-2019
0 2
0
2
ddrillic
A user by the name Greg belongs to an ldap group which is mapped successfully to a role and this role is mapped to a ...
by ddrillic Ultra Champion in Security 04-15-2019
0 2
0
2
chclemence
Hello, I'm trying to configure Proxy SSO authentication, with PingAccess, for Splunk Enterprise v7.2.5.1. But whatev...
by chclemence Explorer in Security 04-15-2019
1 2
1
2
splunkIT
We’ve started testing Splunk 7 and I noticed that when I make changes to the splunk/etc/passwd file and restart splun...
by splunkIT Splunk Employee Splunk Employee in Security 04-12-2019
0 6
0
6
lycollicott
Only a fraction of our indexes are listed as available and there is nothing listed under selected. For example: T...
by lycollicott Motivator in Security 04-11-2019
2 16
2
16
pragycho
Hi , i have AD server configuration GUI page in my app where i am setting user_id , password, Group in data input . s...
by pragycho Loves-to-Learn in Security 04-10-2019
0 5
0
5
newbie2tech
Hi Team, In my implementation splunk is integrated with LDAP authentication, users who left the organizations will b...
by newbie2tech Communicator in Security 04-09-2019
0 4
0
4
anj1
Hi, I'm running a dockerised Splunk on heroku. How do I access the splunk interface through my heroku website or ho...
by anj1 New Member in Security 04-08-2019
0 1
0
1
tlam_splunk
We want to change the admin password for all the UF globally. Is it possible to change it through the deployment serv...
by tlam_splunk Splunk Employee Splunk Employee in Security 04-08-2019
0 2
0
2
cblanton
I am trying to use Active Directory group membership to filter my events. Our work has nothing to do with Windows or ...
by cblanton Communicator in Security 04-05-2019
0 3
0
3
cybercop007
Hi All, Am pretty new to this tool but excited about the capability of the tool. Am trying to search a network in my...
by cybercop007 New Member in Security 04-04-2019
0 1
0
1
unls
I want to create a system where my users can manage an app self-service. I am having trouble finding a way to allow a...
by unls New Member in Security 04-03-2019
0 1
0
1
cfcsolutions
We will be using a Splunk app (https://splunkbase.splunk.com/app/4422/ disclaimer: we made this app) to send out aler...
by cfcsolutions Engager in Security 04-03-2019
0 1
0
1
akawacz
Hi I am having an issue with deleting/editing calculated fields in Splunk Web. Any idea, how I can remove these two?...
by akawacz Path Finder in Security 04-03-2019
0 2
0
2
athorat
Want to grant delete permissions for a non admin account for specific prod-test-* indexes Created a new role and map...
by athorat Communicator in Security 04-03-2019
0 3
0
3
jsryu0247
I have a splunk account. I want to create a pearsonvue-splunk account. You will need your Splunk ID to complete the...
by jsryu0247 Engager in Security 03-29-2019
0 2
0
2
maxnewell
In our Splunk Cloud install, we use SAML authentication for all regular users. However, we have also defined an inter...
by maxnewell New Member in Security 03-28-2019
0 1
0
1
anushareddy6767
When can we expect splunk to support 2Factor Authentication for "Siteminder" using SAML.... Is it going to be in 6.4...
by anushareddy6767 Explorer in Security 03-28-2019
0 2
0
2
sadpan
hiI am trying setup same for Splunk Enterprise instance in my local using okta . I am getting below error from Splunk...
by sadpan New Member in Security 03-28-2019
0 2
0
2
rashid47010
from the cluster master I select validate configuration bundle and after some time i recieve below error message: "Bu...
by rashid47010 Communicator in Security 03-26-2019
0 1
0
1
Get Updates on the Splunk Community!

Meet the .conf26 AI Agent Buildathon Winners

At the .conf26 AI Agent Buildathon, Splunk users turned their operational expertise into working AI agents ...

Trusted Autonomy in the SOC: A Maturity Journey

AI is compressing attacker timelines and pushing SOC teams beyond human capacity thresholds. The next SOC ...

Supercharging Windows Security Detection Performance: Introducing Hybrid Field ...

Windows event logs—from Security auditing and Sysmon to PowerShell script blocks—form the operational backbone ...