Security

Community Activity

AuthorizationFailed: [HTTP 403] i get this error "AuthorizationFailed: [HTTP 403] Client is not authorized to perform requested action; https://127.0... by oadiaobong Explorer in Security 03-21-2019 0 0	0	0
How can I use Splunk (or Splunk ES) to track the expiry date of all the certificates we use? Hello I need to design a report in Splunk that tracks expiry dates of all the SSL certificates used by different ap... by aseid New Member in Security 03-20-2019 0 4	0	4
Splunk SAML authentication - Data Confidentiality issue Hi, I am using SAML Authentication with an IDP for SSO. Everything works perfect unless we noticed an issue. The use... by ashutosh2020 Explorer in Security 03-20-2019 0 9	0	9
Any tool to encrypt passwords based on a splunk.secret? We have multiple secrets for the different tiers (forwarders/search heads etc.). Some of the apps like IPS needs to h... by koshyk Super Champion in Security 03-20-2019 1 3	1	3
SSL圧縮設定時にサーチ等でタイムアウトが発生しますデフォルトの設定である、SSL圧縮を有効にした際、サーチ等でタイムアウトが発生しています。常に発生する訳ではなく、複数のサーチで大量のデータを問い合わせする際に起こりやすいです。考えられる原因は何でしょうか？ by nfutatsugi_splu Splunk Employee in Security 03-20-2019 0 1	0	1
Query to retrieve dashboard accessible by a particular role? Hi, Is there a way to find which dashboards are accessible to a particular role of users? by saurabh009 Path Finder in Security 03-19-2019 0 1	0	1
How I can connect to a secure website? I just starting to use Splunk and I want to try this : I want to connect with Splunk at this address http://support.... by atom2019 New Member in Security 03-19-2019 0 1	0	1
Can I specified Owner or Apps when using a savedsearch in my SPL? Hi all, In my case, I want to use other App's saved report (already visible in my App) in my savedsearch command. One... by andyhuangmigo New Member in Security 03-19-2019 0 0	0	0
Splunk WEB: ERROR HTTPServer - SSL context could not be created and ERROR SSLCommon - Can't read certificate file Running into the following errors when configuring and restarting splunk using third party certificates. All configur... by scc00 Contributor in Security 03-18-2019 0 6	0	6
Security Events Anyone help me on below, 1) Login 2) Logoff 3) Un-successful login 4) Modify authentication mechanisms 5) Create use... by brpsingara Explorer in Security 03-18-2019 0 4	0	4
running splunk cmds via SAML account How can i run splunk cmds (that require me to authenticate) from cmd line using my AD account - i have tried several ... by Esky73 Builder in Security 03-18-2019 0 2	0	2
How to configure a role for a user to change their password within their own app? Hi all, I have an issue whereby I have created a role which pretty much allows users to simply just look at their da... by SecureIA Path Finder in Security 03-17-2019 2 7	2	7
Add mutiple users to a role at one Go How to add mutiple users to a newly created role at one go? Curently i go to each user and add role manually... it ru... by ma_anand1984 Contributor in Security 03-14-2019 1 7	1	7
Winsock error 10061 while opening Splunk web Hi Team, I am trying to install Splunk Enterprise 7.1.1 on my local windows 10 machine and on board some of the secu... by siva_cg Path Finder in Security 03-14-2019 1 12	1	12
User with two roles and one search restriction does not work I have troubles using Splunks role management in combination with search restrictions. My setup is straightforward: A... by mgutschelhofer Explorer in Security 03-14-2019 0 4	0	4
Why is curl search giving an error after upgrading Splunk to 7.2.4? Hi, After upgrade splunk to 7.2.4 one curl search that was working perfectly in version 6.5.3 doesn't work anymore.... by jmallorquin Builder in Security 03-14-2019 0 11	0	11
Splunk Password Policy of admin role The content of Splunk password Policy. -- authentication.conf -- [splunk_auth] constantLoginTime = 0.000 enablePassw... by khyoung7410 Communicator in Security 03-13-2019 0 3	0	3
How to setup order of apps in the launcher page for all the users? Hi, I am trying to setup the order of apps in the launcher page but I am unable to do so. I tried creating SPLUNK_H... by saurabh009 Path Finder in Security 03-12-2019 1 2	1	2
Do we need to take Splunk exams every time I want to renew our current Splunk certs? Hi, I've gotten User, Power User, and Enterprise Admin with the new post-August 2018 exam setup. When I need to ren... by russell120 Communicator in Security 03-12-2019 0 1	0	1
New power user certification Guidance HI All, Where can I get Top 100/150 questions which needs to be prepared for PU certification ? Thanks in advance by atulwadyalkar New Member in Security 03-10-2019 0 1	0	1
Why am I getting an error in splunkd.log when setting up Splunk Port 9997 SSL Attempting to set up new Splunk 7.2.4.2 server on Redhat 7 using our own cert. Splunk web works fine with https using... by JarrettM Path Finder in Security 03-07-2019 0 2	0	2
SSDs RAID Level Spunk "Inheriter" here - getting conflicting opinions from hardware SAN storage vendor vs. Splunk. Since the beginnin... by jensterddcaa New Member in Security 03-07-2019 0 1	0	1
slave had no matching license pool for the data it indexed We had 14 indexers under a pool of 2.3TB license. We added 6 more indexers before 5 days but forget to add it under ... by rahul29564 New Member in Security 03-06-2019 0 1	0	1
How does a user who signed in via SAML log out? We have an interesting problem with our use of Splunk Cloud. We use SAML to log into it, but if a user is added to a... by alain_odea Engager in Security 03-06-2019 2 2	2	2
Roles in Splunk Web Hi, can you access Splunk Web with an admin account but with a different role, so you dont need multiple accounts fo... by sstruecker Engager in Security 03-05-2019 0 2	0	2