Security

Community Activity

Search head's authentication credentials rejected by peer. I've re-added peers 4 times and this keeps happening! We've migrated some search heads, i've deleted the indexer peers, readded the cluster masters and everything looks fi... by gozulin Communicator in Security 04-17-2019 2 18	2	18
How do roles inherit capabilities and properties? After having read through some documentation and several discussions, I didn't find out, if roles are being inherited... by adckia New Member in Security 04-17-2019 0 2	0	2
Why the default app is launcher for a new user? A user by the name Greg belongs to an ldap group which is mapped successfully to a role and this role is mapped to a ... by ddrillic Ultra Champion in Security 04-15-2019 0 2	0	2
ProxySSO authentication failed to process groups header Hello, I'm trying to configure Proxy SSO authentication, with PingAccess, for Splunk Enterprise v7.2.5.1. But whatev... by chclemence Explorer in Security 04-15-2019 1 2	1	2
Why is a number getting appended to each line when making changes to password file in Splunk 7? We’ve started testing Splunk 7 and I noticed that when I make changes to the splunk/etc/passwd file and restart splun... by splunkIT Splunk Employee in Security 04-12-2019 0 6	0	6
Why are only some indexes listed in the available indexes pane under roles? Only a fraction of our indexes are listed as available and there is nothing listed under selected. For example: T... by lycollicott Motivator in Security 04-11-2019 2 16	2	16
issue : want to hide/encrypted text password Hi , i have AD server configuration GUI page in my app where i am setting user_id , password, Group in data input . s... by pragycho Loves-to-Learn in Security 04-10-2019 0 5	0	5
How to get list of users removed from LDAP but are still available in Splunk user directories Hi Team, In my implementation splunk is integrated with LDAP authentication, users who left the organizations will b... by newbie2tech Communicator in Security 04-09-2019 0 4	0	4
Access Splunk interface on Heroku website Hi, I'm running a dockerised Splunk on heroku. How do I access the splunk interface through my heroku website or ho... by anj1 New Member in Security 04-08-2019 0 1	0	1
Update the admin password for UF globally We want to change the admin password for all the UF globally. Is it possible to change it through the deployment serv... by tlam_splunk Splunk Employee in Security 04-08-2019 0 2	0	2
How do I connect to Active Directory groups without Splunk for Windows Infrastructure or Splunk for Microsoft Exchange? I am trying to use Active Directory group membership to filter my events. Our work has nothing to do with Windows or ... by cblanton Communicator in Security 04-05-2019 0 3	0	3
Network Search - How do I search for network addresses without using CIDR? Hi All, Am pretty new to this tool but excited about the capability of the tool. Am trying to search a network in my... by cybercop007 New Member in Security 04-04-2019 0 1	0	1
How can I allow users to change permissions of all objects within an app? I want to create a system where my users can manage an app self-service. I am having trouble finding a way to allow a... by unls New Member in Security 04-03-2019 0 1	0	1
Limitations for Splunk Cloud outgoing traffic We will be using a Splunk app (https://splunkbase.splunk.com/app/4422/ disclaimer: we made this app) to send out aler... by cfcsolutions Engager in Security 04-03-2019 0 1	0	1
Why am I unable to delete calculated fields from Splunk Web? Hi I am having an issue with deleting/editing calculated fields in Splunk Web. Any idea, how I can remove these two?... by akawacz Path Finder in Security 04-03-2019 0 2	0	2
delete_by_keyword not working Want to grant delete permissions for a non admin account for specific prod-test-* indexes Created a new role and map... by athorat Communicator in Security 04-03-2019 0 3	0	3
How to join Pearsonvue spluk I have a splunk account. I want to create a pearsonvue-splunk account. You will need your Splunk ID to complete the... by jsryu0247 Engager in Security 03-29-2019 0 2	0	2
How do you make a user never log out? In our Splunk Cloud install, we use SAML authentication for all regular users. However, we have also defined an inter... by maxnewell New Member in Security 03-28-2019 0 1	0	1
When can we expect splunk to support 2Factor Authentication for "Siteminder" When can we expect splunk to support 2Factor Authentication for "Siteminder" using SAML.... Is it going to be in 6.4... by anushareddy6767 Explorer in Security 03-28-2019 0 2	0	2
Why does Saml response not contain group information? hiI am trying setup same for Splunk Enterprise instance in my local using okta . I am getting below error from Splunk... by sadpan New Member in Security 03-28-2019 0 2	0	2
SSLv3 certificate error from the cluster master I select validate configuration bundle and after some time i recieve below error message: "Bu... by rashid47010 Communicator in Security 03-26-2019 0 1	0	1
In Splunk Cloud how to change search restriction of a user I want to change a splunk user's search restriction limit. Pls. suggest, it can be done by only Splunk for Splunk cl... by splunkupl New Member in Security 03-26-2019 0 0	0	0
Can Splunk handle multiple LDAP and Splunk native authentication simultaniously Hi all, In our environment we have multiple LDAP systems. They are there due to multiple acquisitions. Can Splunk han... by anantadeshpande New Member in Security 03-26-2019 0 5	0	5
Severity Type for delivery to splunk log collector. Hi, We were told to send a security Logs from MobileIron to Splunk log collector. But we are unsure what to fill in ... by myazid New Member in Security 03-25-2019 0 1	0	1
Search user by IP Can I check how to search a user by IP addresss? I would like to create a table to list out all the users. by kuki_junior New Member in Security 03-25-2019 0 1	0	1