Security

Community Activity

Okta SAML SSO I am following the Okta config page and imported the IdP metadata easily. When trying to save the SAML config I get a... by shpences New Member in Security 12-21-2018 0 0	0	0
is it possible to get splunk to insert same event betweent he start and end time of the first record? Sample Data, datetime starttime endtime id desc 1 2018-08-16 10:49:49 2018-08-16 10:49:49 2018-08-16 10:54:1... by w344423 Explorer in Security 12-21-2018 0 1	0	1
Where can I change my language configuration in Splunk? I started Splunk, Demo versión of 90 Days in my desktop. Splunk is running all Menus and tabs in Chinese Mandarin. Wh... by gganzab New Member in Security 12-18-2018 0 1	0	1
How do I enable SSL and authentication between the universal forwarder and heavy forwarder? I am planning to use a bunch of universal forwarders, sending logs to a group of heavy forwarders. How do I enable SS... by jaykumar_jnpr New Member in Security 12-18-2018 0 1	0	1
How do you configure forwarder to connect to TCP receiver using SSL? Hello Everyone, I'm trying to connect multiple Windows Splunk Universal Forwarders to a TCP receiver. I am running i... by SplunkPersonal Path Finder in Security 12-17-2018 0 2	0	2
How do you display stats for both atomic counts and total counts per org? Hi! I have spent a couple of days now hunting for an answer with similar issues, but I am no closer to finding a so... by katharsys Path Finder in Security 12-17-2018 0 8	0	8
Apps Browsing is not working When I go to browse for Apps in my local instance, nothing shows and keeps loading until time out connection. Is the... by Anmar0293 Path Finder in Security 12-15-2018 0 3	0	3
How do I allow multiple users to login with the same shared account? We have a requirement to allow approx 50 users to login simultaneously to Splunk using the same shared account. The r... by tusharsaran1 Path Finder in Security 12-14-2018 0 6	0	6
Can you answer my question regarding managing orphaned knowledge objects.? There are descriptions on managing orphaned knowledge objects after deletion of users, for reasons such as change of ... by yutaka1005 Builder in Security 12-13-2018 0 3	0	3
Splunk User data access control - Managing roles and access Hi, Please find below usecase we have currently: We have the two indexes A having sourcetypes X1,Y1,Z1 and B having... by rakeshyv0807 Explorer in Security 12-12-2018 0 0	0	0
Is it possible to restrict the capability "indexes_edit " to specific indexes? Title says it all. We want to expand the "user" Role to create scheduled Reports (schedule_search) and write them t... by jbrocks Communicator in Security 12-12-2018 0 1	0	1
How to configure "guest" access to Splunk-Web with no password? I'd like to open up some of Splunk-web for any user to access, e.g. so that they can see overall load/usage of a clus... by jbp4444 Path Finder in Security 12-11-2018 1 4	1	4
How to set user permission for "Show Source" in Event Actions drop down? The splunk administrator in my organization removed some permission for my role, the consequence is that I don't have... by baiyungao New Member in Security 12-11-2018 0 5	0	5
cannot upload with "proxy error" I cannot upload log file from web-service. Splunk said "('Cannot connect to proxy.', error('Tunnel connection failed... by w0000641 New Member in Security 12-11-2018 0 2	0	2
"java.sql.SQLRecoverableException: IO Error: Connection reset by peer, Authentication lapse" I have 12 Input connections setup on my Splunk DB connect2. While trying to executeSQL on all the 12 inputs simultane... by vishal_thummala New Member in Security 12-10-2018 0 1	0	1
Splunk admin not 'admin' My server team wants to stop using AD for authentication and start using SAML. In a test system, we implemented SAML.... by bpeasland New Member in Security 12-10-2018 0 2	0	2
Is there a list of what each privilege/capability permits? I've been searching for a list of what each of the user capabilities means - what access it allows, what objects a ro... by davidatpinger Path Finder in Security 12-10-2018 1 3	1	3
Azure Event Hub connector give Permission Error I am running Splunk inside docker on a Linux host and I have installed an Azure event hub connector add-on. I am get... by prateekchaudhar New Member in Security 12-10-2018 0 1	0	1
Comparing two CSV files Hello, I am simply trying to compare "column1" column from file1.csv to "column1" from file2.csv and output the diff... by vulnfree Explorer in Security 12-09-2018 0 2	0	2
What can be done with intermittent ldap issues? Quite often we are in a state that our users can't log on to the Splunk UI for 10-20 minutes. All along we were sure ... by ddrillic Ultra Champion in Security 12-09-2018 0 4	0	4
AWS Add-ON encryption I'd like to confirm that the Splunk AWS Add-On communicates with AWS over an encrypted channel (https) Thanks by rafael9 New Member in Security 12-07-2018 0 1	0	1
How do I configure an SSL cert for Splunk Web on a Windows server? I have a Windows 2008 server running Splunkweb and I need to configure it to work with the certificate I've obtained ... by cdavidy Explorer in Security 12-07-2018 1 8	1	8
How do I limit the fields returned by Splunk's REST handlers? I am attempting to use Splunk's REST handlers. In my case, the REST handler returns lots of fields that I don't need.... by LukeMurphey Champion in Security 12-06-2018 0 1	0	1
How do I show 0 when no results are found in a report with multiple columns? Hi All, I want to display the value "0" when there are "No results found" and the actual values when there are res... by arunsoni Explorer in Security 12-05-2018 0 9	0	9
How to configure Splunk to authenticate through LDAP? I am very new to Splunk. I am looking for a simplified document to help me configure Splunk to authenticate through L... by msg64 New Member in Security 12-05-2018 0 4	0	4