Security

Community Activity

Failed login alert issue We have a alert created in my orgainzation for failed login alerts, It is working fine but for last ttwo days we are ... by raghav013 New Member in Security 07-25-2018 0 3	0	3
Possible to change permissions on all reports and dashboards? I need to change permissions on all reports and dashboards to allow a new user role to only be able to read them. Bu... by dmitchell92 New Member in Security 07-25-2018 0 1	0	1
Can the PASSWORD within user-seed.conf be hashed rather than in clear text? Can the PASSWORD in the user-seed.conf file be a hashed representation, or does it need to be specified in the clear? by chris_barrett SplunkTrust in Security 07-25-2018 2 2	2	2
How do I prevent multiple connections when I log in to Splunk? Hi. Multiple people can log in using one ID/PW. When I log into Splunk, how can I prevent my login using the same ac... by khyoung7410 Communicator in Security 07-24-2018 0 2	0	2
Mark servers RED based on a lookup and events coming in the index HI Experts, I am working on a query which checks the events for a server in an index=tool and i am maintaining a loo... by macadminrohit Contributor in Security 07-24-2018 0 0	0	0
error while adding data from local machine. Cannot connect to proxy.', error(10061, 'No connection could be made because the target machine actively refused it') by gaurabgg New Member in Security 07-24-2018 0 0	0	0
Using import and export attributes in default.meta Hi I want to import a specific view(dashboard) in an app from another app having that particular view with permissi... by ruchir Explorer in Security 07-24-2018 2 7	2	7
Multiple "where like" on a CSV file The CSV has over 100k entries. When I timechart this search I see about 6800 results. I receive values for all 3 mont... by nqjpm Path Finder in Security 07-24-2018 0 2	0	2
I've shared field extractions with my app but no one else can see them? Hi all, I've completed a dashboard for my team at work, and am trying now to share it with them. Several of the dash... by cjansson77 New Member in Security 07-22-2018 0 6	0	6
how to hide an emtpy value field dear all : I have some firewall logs. I need to extract the newly added ACL rules from it. I used basic searches ... by bestSplunker Contributor in Security 07-21-2018 0 4	0	4
Is there a parameter I can use when running the Universal Forwarder so i am not prompted to set the password after install? The newer Universal Forwarders require a password change once run after install. I use Microfocus server automation w... by rklunder New Member in Security 07-20-2018 0 1	0	1
active directory - how to map user to role ? Hi Gurus, I have connected Splunk server to my Active Directory server. I see LDAP groups and everything seems to b... by konradwawryn Explorer in Security 07-19-2018 0 6	0	6
How to restrict timerange in tstats search within query? I have a tstats search panel on a dashboard and I'm trying to limit the timeframe for this particular search (separat... by DEAD_BEEF Builder in Security 07-19-2018 0 2	0	2
FilesystemChangeWatcher- error getting attributes of path - The user name or password is incorrect. How do I set user and password in inputs.conf? This is my file: [monitor://\\myServer\myFolder] disabled = false in... by Valdemir_Splunk Explorer in Security 07-18-2018 0 3	0	3
What should importRoles be when creating a power role? When creating a power role, should I use - importRoles = power Or importRoles = user; power by ddrillic Ultra Champion in Security 07-17-2018 0 2	0	2
I am getting 07-17-2018 10:58:21.699 -0700 ERROR ExecProcessor - message from "python "C:\Program Files\Splunk\etc\apps\rest_ta\bin\rest.py"" HTTP Request error: 403 Client Error: Forbidden. Need help to resolve this issue. I am getting 07-17-2018 10:58:21.699 -0700 ERROR ExecProcessor - message from "python "C:\Program Files\Splunk\etc\ap... by archanat New Member in Security 07-17-2018 0 0	0	0
How to restrict access to knowledge objects for users? Hello all, Is it possible in Splunk to restrict user of accessing the "Knowledge" settings? I want to disable certai... by sbarinov Path Finder in Security 07-17-2018 0 3	0	3
What is the most simple way to enable SSL communication between my forwarders and indexers? Does anyone know where I can find a working configuration that shows splunk2splunk using ssl? I would really apprecia... by jbsplunk Splunk Employee in Security 07-16-2018 4 4	4	4
Splunk SSO Hello Community! We have a running Splunk Instance and our users actually log in via Active Directory Accounts over ... by RobertRi Communicator in Security 07-16-2018 0 1	0	1
WMI Splunk pull remote logs What further configuration is needed to pull WMI logs from remote servers, currently we are only getting back data fr... by JPaule Explorer in Security 07-14-2018 0 3	0	3
We had a authentication outage today, trying to write the "best" alert for this? Input? All, Had a AD outage today which caused issues, but we had no alert. I was just going to compare time ranges in 15 ... by daniel333 Builder in Security 07-12-2018 0 2	0	2
Correlate userid to username Splunkers, The following search returns user lockouts: index=winevents EventCode=4740 I have a user field which is... by matthew_foos Path Finder in Security 07-12-2018 0 6	0	6
LDAP Authentication, single group with multiple strategies. My gut and Googling tells me this won't work, but I'd like some backup or a link to direct documentation showing why/... by JDukeSplunk Builder in Security 07-12-2018 0 1	0	1
authentication.conf userbaseDN attribute being read as multiple stanzas I am working on a UNIX platform where in creating the authentication.conf file using vi or vim, I have multiple LDAP ... by greatdane New Member in Security 07-12-2018 0 2	0	2
Why can I not login with a default password for web interface in Splunk 7.1.1 enterprise? imigae : splunk-7.1.1-8f0ead9ec3db-Linux-x86_64.tgz installation: tar xvzf splunk-7.1.1-8f0ead9ec3db-Linux-x86_64.tgz... by haoban Path Finder in Security 07-11-2018 0 4	0	4