Security

Community Activity

slave had no matching license pool for the data it indexed We had 14 indexers under a pool of 2.3TB license. We added 6 more indexers before 5 days but forget to add it under ... by rahul29564 New Member in Security 03-06-2019 0 1	0	1
How does a user who signed in via SAML log out? We have an interesting problem with our use of Splunk Cloud. We use SAML to log into it, but if a user is added to a... by alain_odea Engager in Security 03-06-2019 2 2	2	2
Roles in Splunk Web Hi, can you access Splunk Web with an admin account but with a different role, so you dont need multiple accounts fo... by sstruecker Engager in Security 03-05-2019 0 2	0	2
Disk usage quota (user-level) has been reached: How can I monitor? We've all seen this message. Disk usage quota (user-level) has been reached. usage=540MB quota=500MB. Then after a... by jluste Path Finder in Security 03-05-2019 2 8	2	8
LDAP on AD not returning all groups - even with filtering I have successfully configured LDAP authentication, however while doing so I noticed that the "LDAP Groups" page wasn... by FunPolice Path Finder in Security 03-05-2019 3 7	3	7
What should I enable in the firewall to allow communication collector-SplunkServer Hi team! What ports do I need to open and in what direction, I do not know if I leave any. Is there any communicati... by christianubeda Path Finder in Security 03-05-2019 0 1	0	1
Splunk SSO with reverse proxy. To give an Idea I had to make a smal flask webserver that would consume my companys business web login feature. After... by mukuldang08 New Member in Security 03-04-2019 0 0	0	0
How can i encrypt indexed data? Hi! splunk version : 6.4.x os : Linux-64bit customer wants indexed data is encrypted. How can i encrypt indexed d... by ryuch2002 Explorer in Security 03-04-2019 2 3	2	3
How do you filter search results based on a variable...? Hi all, Hopefully my title makes sense, I'm trying to filter my results depending on the format of the username. I'... by danfinan Explorer in Security 03-04-2019 0 5	0	5
A member was added to a security-enabled local group a source user added one users to local admin group of server. in event Security ID is S-x-x-xx-xxxxxxxxxxx8-7xxxxxx4-... by rashid47010 Communicator in Security 03-04-2019 0 2	0	2
SSL Versions for tcp-ssl input ignored I'm trying to get Splunk to accept SSLv3 for a special case of tcp-ssl input, and although specifying sslVersions = "... by tiagofbmm Influencer in Security 03-01-2019 0 2	0	2
How come I'm unable to logout in Splunk SAML SSO? Splunk is configured to use SAML auth with ADFS v4. Login works fine, but logout throws an error: "Failed to valida... by pmalcakdoj Path Finder in Security 02-28-2019 4 1	4	1
Getting License expired notification but already used free license. Unable to see the Event logs on search and reporting getting Licence expired alert but we have already used and appli... by shipco New Member in Security 02-28-2019 0 1	0	1
Review roles for unnecessary read or write access? I am receiving a Health Check warning regarding the roles and responsibilities for our "investigative_canvas" in Ente... by mtupper New Member in Security 02-28-2019 0 4	0	4
How to troubleshoot why one user within a LDAP Group cannot login to Splunk, but other users are fine? I've 5 LDAP users defined in a LDAP group and 4 of them login to splunk successfully. Only one of them got problem. ... by daniel_splunk Splunk Employee in Security 02-28-2019 1 5	1	5
User missing roles. Hello I have users who do not have all the roles they should be associated with appearing in the Access Control>>Use... by emmdominguez Observer in Security 02-27-2019 0 9	0	9
Can you help me find the access time range between hours on a single day? Hello guys, I am trying to search/formulate a method to determine the range of time (hours) in a day for which the r... by vpurushottam Explorer in Security 02-27-2019 0 1	0	1
Reverse Proxy SIngle Sign on My company has a new business web login to have Single sign ons for the users. I am trying to setup a reverse proxy t... by mukuldang08 New Member in Security 02-27-2019 0 1	0	1
How do you reload inputs configuration file changes without a restart? Dears, May I know if there is any option to reload an inputs configuration file change without a restart? by ahmedhassanean Explorer in Security 02-26-2019 0 1	0	1
ERROR JsonLineBreaker logged by DUO Splunk Connector Looking for insights as to what's the source of some errors we're seeing with DUO Splunk Connector. We installed the... by staten Observer in Security 02-26-2019 0 0	0	0
Unable to (sometimes) login During this past week there have occassionally been times when I have tried to log into Splunk and wasn't able to. I ... by Reid_splunk New Member in Security 02-26-2019 0 2	0	2
Are there any way to restrict the role to create custom app and to list apps? Hi Splunk plrofessionals, I would like to create the role which is enable to create own custom app by barebones temp... by Shuhei052492 Path Finder in Security 02-24-2019 0 0	0	0
Detect successful bruteforce attack....(successful login followed by failed multiple login ) I have created following query as per my database but it is indicating only all events during that span. Not generate... by Nishit9 New Member in Security 02-23-2019 0 13	0	13
Not prompted for Splunk user upon installation Hi, I'm trying to migrate my Splunk instance from an AWS VM to a GCP VM. I copied over this file splunk-6.5.0-59c892... by byu168 Path Finder in Security 02-22-2019 0 2	0	2
Splunk role without permissions and capabillities can access jobs and can see the search Hello, to let you understand the problem easier I'll explain quickly the requirements for my role: - create a role ... by HIBE151 Explorer in Security 02-22-2019 0 0	0	0