Security

Community Activity

Should I grant all users schedule search permissions or not? Since normal users by default do not have the right to create alerts, I guess there is a good reason for it. Could it... by rune_hellem Contributor in Security 10-30-2018 0 1	0	1
Splunk Enterprise starts, but why is my connection refused trying to access Splunk Web in my browser? I just installed Splunk Enterprise 6.0 and all went swimmingly. However, my connection is refused when trying to go t... by natedlee New Member in Security 10-29-2018 0 4	0	4
How do I allow users to perform some admin command without giving them full admin rights? Hi, We would like to give another team the possibility to run administrative commands such as: show shcluster-stat... by davietch Path Finder in Security 10-29-2018 0 3	0	3
How do you change the SSL setting back to no SSL? I changed the SSL setting in my local instance of Splunk. I changed it from nonsecure to secure. How do I change it... by strongmd15 New Member in Security 10-27-2018 0 1	0	1
port connectivity issue "Connection refused" Hi Team, We are facing port connectivity issue since 5th Sep 2014 between indexer and forwarder :- $ telnet forward... by seema2502 Explorer in Security 10-24-2018 0 6	0	6
Why is the index not capturing UDP PortTraffic data? Within Splunk, we created two UDP ports. We are able to see traffic using Wireshark, however, the Splunk index is not... by charleswmiller New Member in Security 10-23-2018 0 1	0	1
Dismiss free disk space warning after resolving problem I got a free disk space warning - I resolved the issue by massively increasing the storage device's capacity. However... by mdufrasne Explorer in Security 10-19-2018 0 0	0	0
How come Splunk web is timing out when I click on the "Settings > Licensing" page? This is only happening on the license master. Everything working fine on the splunk web - it works well and response ... by sylim_splunk Splunk Employee in Security 10-18-2018 0 2	0	2
Can you please suggest the right capabilities and inheritance that we should use to create/edit roles? We're trying to set up Role Based Access Controls for our security team who provisions roles and access. Can you plea... by rjteh_splunk Splunk Employee in Security 10-18-2018 0 1	0	1
What capabilities are required for users to view dashboards? Hello, I create a user only for view some dashboards, what is the possible capabilities that i need to configure in ... by Isaor New Member in Security 10-18-2018 0 0	0	0
Cna't Connect to HTTP Event Collector Endpoint with My Certificate I installed my certificate into $SPLUNK_HOME/etc/auth/splunkweb. I can access Splunk Web on browser but, HTTP Event C... by diavolo Path Finder in Security 10-18-2018 0 1	0	1
DBconnect to SCCM database Trying to connect to MSSQL for the SCCMdatabase. I'm trying to use a domain account, and Windows Authentication. If I... by Nadhiyaa Path Finder in Security 10-18-2018 1 6	1	6
Is there a way to hide or disable "Manage Apps" and "Open in Search" on a dashboard from users with a restricted role? Hi. We have users with a restricted role. When that user logs in, we'd like to hide/disable "Manage Apps" and "Sear... by flee Path Finder in Security 10-16-2018 4 12	4	12
secure splunk in cloud Can anyone suggest ways to secure splunk in my public private cloud. Want to secure both Splunk web and inter splunk ... by manikdham Path Finder in Security 10-15-2018 0 2	0	2
Optiv Threat Intel fields Hello friends. I've recently installed optiv threat intel on my splunk indexer on my home network - trying to make... by zigity12 Engager in Security 10-12-2018 0 4	0	4
How do I find the SSL version the Splunk forwarder is using to send the data? I need to validate all my forwarders to check which SLL version(TLS1.2, TLS1.1, ETC) they are using to send data. We ... by arrangineni Path Finder in Security 10-11-2018 0 0	0	0
how can i see who has run queries or dashboards Is there an easy way to work out who has run queries or dashboards on Splunk and obtain contact information e.g. e-m... by vincenp2 New Member in Security 10-11-2018 0 1	0	1
How do I reset only admin password? The splunk version is 6.6.3. I have two user accounts. admin and test_admin. When the admin password is reset, the... by spl109 Explorer in Security 10-11-2018 0 4	0	4
Why can't I log-in to Splunk Enterprise? Hi, I am doing the Splunk Fundamentals 1 course and I need to use Splunk Enterprise for the lab work in module 3. I ... by acollins21 Engager in Security 10-11-2018 0 4	0	4
How come after allowed Indexes are restricted in authorize.conf, affected users are still able to search anywhere? On my SearchHead (ver 7.1.3) , I have created a user role via manually editing the authorize.conf file, which restric... by pkarpushin Path Finder in Security 10-09-2018 0 2	0	2
Why am I unable to get to _internal index with a custom role? In my authorize.conf, I have the following stanza: [role_predix-ops-user] cumulativeRTSrchJobsQuota = 0 cumulativeSr... by brent_weaver Builder in Security 10-09-2018 0 2	0	2
How come the LDAP config is not picking up users directly under OU? Hello Splunkers, I am having some issue with LDAP authentication. The Issue is: i am having one domain that is abc.... by kannu Communicator in Security 10-09-2018 0 6	0	6
indexes from peer nodes not visible in role creation on search head Hi, we're migrating our v5 non-clustered environment to a v6 cluster with two peer nodes and multiple search heads. ... by mklueh Explorer in Security 10-09-2018 1 15	1	15
How do I access my local Splunk enterprise from outside our local network (Global Access)? I have installed Splunk enterprise in my local system and It can be accessed within a local network using my system's... by dhirendra761 Contributor in Security 10-07-2018 0 4	0	4
I want to pass credentials for a Splunk search There was a method to pass user credentials to a "splunk search" command. I want to execute it from within bash scri... by ageld Path Finder in Security 10-04-2018 0 2	0	2