Security

Community Activity

Restrict a user's ability to write to indexes All - A user brought an issue to my attention today that i can't find a solution to. This user currently has the need... by w531t4 Path Finder in Security 06-04-2018 1 9	1	9
How to parse and extract a json tag wrapped inside a XML? I need to extract Json elements wrapped in the XML node. For example, in the below code, i want to extract the json e... by besa0903 New Member in Security 06-01-2018 0 1	0	1
Monitor Registry for reg key creation Hi Guys, So I wish to monitor for the creation of a reg key that currently does not exist, could one of you kind fol... by AaronMoorcroft Communicator in Security 06-01-2018 0 6	0	6
LDAP authentication - how to filter CN names containing escaped character and wildcard? I am configuring LDAP authentication against Windows AD, where the users are in groups with names containing a hash ... by anewell Path Finder in Security 05-31-2018 0 1	0	1
How to setup auto search based on login name? Hello all, I want to setup Splunk in such a way that when an user logins to the dashboard, Splunk would be able to de... by Cbr1sg Path Finder in Security 05-31-2018 0 8	0	8
Cannot re-add UDP data input after deleting it. Parameter name: UDP port 514 is not available First I wanted to create an alternate data input using 514/udp, so I disabled the existing one and tried to clone ano... by peter_dmitrieff New Member in Security 05-29-2018 0 2	0	2
Splunk FIPS 140-2 with SSL tls1.2 certificates Hello! Does Splunk support running FIPS while using SSL tls1.2 certificates? I read this article and think this migh... by matthewssa Path Finder in Security 05-29-2018 0 1	0	1
Why does setup.xml with encrypted credentials fail on re-run? It's unclear to me how to allow users to change a stored password via setup.xml. The "Setup page example with user c... by ssanborn Engager in Security 05-29-2018 0 1	0	1
Splunk API call to delete users getting timed out due to DUO mfa. I am trying to delete users in splunk using the splunk api. But its getting timed out due to mfa of DUO Security. Is ... by produte New Member in Security 05-28-2018 0 0	0	0
How to change permissions on Splunk log files? I have a need to monitor splunk logs with other applications, therefore I would like to change all (existing and newl... by dshakespeare_sp Splunk Employee in Security 05-27-2018 9 2	9	2
Can't log in to trial download to complete fundamentals course Hello, I'm trying to complete module 4 of the free fundamentals 1 course. The instructions say you can install a tria... by jmuehlenbein New Member in Security 05-26-2018 0 2	0	2
LDAP Authentication Best Practice 6.6.4 We've been wondering whether modifying the LDAP BIND password through the Web GUI (clustered environment) or modifyin... by halbeisendv Path Finder in Security 05-23-2018 0 1	0	1
Does Splunk support 3rd party certificates without passwords? I have a customer with an internal CA. The private key generated for each host does not have a password. Does Splun... by responsys_cm Builder in Security 05-23-2018 0 1	0	1
Configuration file permissions always reset by splunk Hi, I am having the same issue as this one (https://answers.splunk.com/answers/27128/directory-and-config-file-permis... by Clovisa Path Finder in Security 05-23-2018 0 0	0	0
How can I get the URL path list, visited by the user navigating through a particular application? Hi, I have a requirement where I need to get the list of URL's the user has navigated through while accessing a part... by rakeshyv0807 Explorer in Security 05-22-2018 0 5	0	5
How do I login for the first time? The username and password that I created when I registered to download the product doesn't seem to work. How do I lo... by Alan_Bradley Path Finder in Security 05-21-2018 1 4	1	4
how to reset my splunk enterprise password I downloaded splunk enterprise on my personal Windows 10. I changed my login and password from default admin/changeme... by flau New Member in Security 05-21-2018 0 2	0	2
o365 logins We have been using splunk to help monitor compromised email accounts by looking for logins from countries other than ... by pacificcreek Engager in Security 05-18-2018 1 6	1	6
Scripted SSO auth errors on indexer cluster We have a clustered setup with server types including an indexer cluster, a search head cluster, and a separate clust... by krisreeves Path Finder in Security 05-18-2018 0 2	0	2
How to send individual emails customized in HTML with tokens assigned to each recipient based on one search every 24 hours to warn of password expiry? Hello, I know that there have been previous threads where users have had similar problems, however, I am looking at... by alexandramr Engager in Security 05-17-2018 3 1	3	1
Content management audit Pls tell me how can i track for any activity being done in content management For eg if i have changed drill down fo... by rahul_mckc_splu Loves-to-Learn in Security 05-17-2018 0 0	0	0
Expired server.pem and sslVerifyServerCert = false on splunkforwarder Hello guys, could you let me know if splunkforwarder will continue to work if sslCertPath=$SPLUNK_HOME/etc/auth/serv... by splunkreal Influencer in Security 05-17-2018 0 0	0	0
Installed 3rd party cert yet I'm still getting unsecure webserver from browser? Use openssl to convert pxf file and installed both .key and .pem file in $SPLUNK_HOME/etc/auth/certs/ still browser r... by jrprez1804 Path Finder in Security 05-16-2018 0 4	0	4
Splunkweb referrer missing since 6.5.5 In Splunk 6.5.3, We've been using document.referrer to get the url when linking from Splunk dashboard to external we... by ehudb Contributor in Security 05-16-2018 0 5	0	5
How can I detect change using userswithloginprivs? All, I have a stock install of Splunk for Nix running on 3k hosts or so. What I want to do in reasonable speed is c... by daniel333 Builder in Security 05-15-2018 0 0	0	0