Security

Community Activity

Not able to find users from Splunk UI ???? Hi All, We have Created Role with name "Pulsenewuser" with the capabilities (edit_user,edit_roles,edit_roles_grant... by harishalipaka Motivator in Security 01-09-2019 0 6	0	6
Filter out event before indexing using REGEX Hello, I would like to filter out the log entries (before indexing) which are created in the debugging mode. They ca... by damucka Builder in Security 01-08-2019 0 9	0	9
Preserve source hostname with f5 and rsyslog We are in the process of using two syslog servers to collect network data. We have an F5 that we use to load balance ... by vonsolo29 Explorer in Security 01-07-2019 0 3	0	3
Why are our LDAP logins getting assigned to the admin role? Hi, I have been trying to debug this for over a month now. Also checked with other Splunk experts who are also stump... by skashyap Explorer in Security 01-03-2019 0 7	0	7
How do I find the bandwidth usage per user in my firewall logs? i want to know the bandwidth usage per user in my firewall logs. Can you tell me how to search my firewall logs: de... by khanlarloo Explorer in Security 12-31-2018 0 3	0	3
SAML SSO w/Okta - "...response does not contain group information" Hi there, I've just followed the documentation/Splunk guide to set up Okta SSO with SAML, however when clicking on th... by danharvey Explorer in Security 12-27-2018 0 4	0	4
How to check certificates? I am new in Splunk and I currently need to check "Valid to:" date from our corporation hundreds of certificates in ou... by Timrit New Member in Security 12-26-2018 0 2	0	2
Splunk web service down but splunkd is running Hello, I have encountered an accident where my splunk search head is not accessible via web. I checked the splunk ser... by Nik_Shafiq New Member in Security 12-23-2018 0 1	0	1
Want to my Score for Splunk Core user certification Today i took Splunk Core user certification exam and i want to know my score, at PearsonVue i got a Score report whic... by zubair007 Engager in Security 12-23-2018 1 1	1	1
Service Anywhere integration with splunk Hi Splunkers, We are using a HP Product called service anywhere for the ticketing system.We want to monitor all tic... by rohitvjoshi Path Finder in Security 12-22-2018 0 2	0	2
Okta SAML SSO I am following the Okta config page and imported the IdP metadata easily. When trying to save the SAML config I get a... by shpences New Member in Security 12-21-2018 0 0	0	0
is it possible to get splunk to insert same event betweent he start and end time of the first record? Sample Data, datetime starttime endtime id desc 1 2018-08-16 10:49:49 2018-08-16 10:49:49 2018-08-16 10:54:1... by w344423 Explorer in Security 12-21-2018 0 1	0	1
Where can I change my language configuration in Splunk? I started Splunk, Demo versión of 90 Days in my desktop. Splunk is running all Menus and tabs in Chinese Mandarin. Wh... by gganzab New Member in Security 12-18-2018 0 1	0	1
How do I enable SSL and authentication between the universal forwarder and heavy forwarder? I am planning to use a bunch of universal forwarders, sending logs to a group of heavy forwarders. How do I enable SS... by jaykumar_jnpr New Member in Security 12-18-2018 0 1	0	1
How do you configure forwarder to connect to TCP receiver using SSL? Hello Everyone, I'm trying to connect multiple Windows Splunk Universal Forwarders to a TCP receiver. I am running i... by SplunkPersonal Path Finder in Security 12-17-2018 0 2	0	2
How do you display stats for both atomic counts and total counts per org? Hi! I have spent a couple of days now hunting for an answer with similar issues, but I am no closer to finding a so... by katharsys Path Finder in Security 12-17-2018 0 8	0	8
Apps Browsing is not working When I go to browse for Apps in my local instance, nothing shows and keeps loading until time out connection. Is the... by Anmar0293 Path Finder in Security 12-15-2018 0 3	0	3
How do I allow multiple users to login with the same shared account? We have a requirement to allow approx 50 users to login simultaneously to Splunk using the same shared account. The r... by tusharsaran1 Path Finder in Security 12-14-2018 0 6	0	6
Can you answer my question regarding managing orphaned knowledge objects.? There are descriptions on managing orphaned knowledge objects after deletion of users, for reasons such as change of ... by yutaka1005 Builder in Security 12-13-2018 0 3	0	3
Splunk User data access control - Managing roles and access Hi, Please find below usecase we have currently: We have the two indexes A having sourcetypes X1,Y1,Z1 and B having... by rakeshyv0807 Explorer in Security 12-12-2018 0 0	0	0
Is it possible to restrict the capability "indexes_edit " to specific indexes? Title says it all. We want to expand the "user" Role to create scheduled Reports (schedule_search) and write them t... by jbrocks Communicator in Security 12-12-2018 0 1	0	1
How to configure "guest" access to Splunk-Web with no password? I'd like to open up some of Splunk-web for any user to access, e.g. so that they can see overall load/usage of a clus... by jbp4444 Path Finder in Security 12-11-2018 1 4	1	4
How to set user permission for "Show Source" in Event Actions drop down? The splunk administrator in my organization removed some permission for my role, the consequence is that I don't have... by baiyungao New Member in Security 12-11-2018 0 5	0	5
cannot upload with "proxy error" I cannot upload log file from web-service. Splunk said "('Cannot connect to proxy.', error('Tunnel connection failed... by w0000641 New Member in Security 12-11-2018 0 2	0	2
"java.sql.SQLRecoverableException: IO Error: Connection reset by peer, Authentication lapse" I have 12 Input connections setup on my Splunk DB connect2. While trying to executeSQL on all the 12 inputs simultane... by vishal_thummala New Member in Security 12-10-2018 0 1	0	1