Security

Community Activity

How to setup auto search based on login name? Hello all, I want to setup Splunk in such a way that when an user logins to the dashboard, Splunk would be able to de... by Cbr1sg Path Finder in Security 05-31-2018 0 8	0	8
Cannot re-add UDP data input after deleting it. Parameter name: UDP port 514 is not available First I wanted to create an alternate data input using 514/udp, so I disabled the existing one and tried to clone ano... by peter_dmitrieff New Member in Security 05-29-2018 0 2	0	2
Splunk FIPS 140-2 with SSL tls1.2 certificates Hello! Does Splunk support running FIPS while using SSL tls1.2 certificates? I read this article and think this migh... by matthewssa Path Finder in Security 05-29-2018 0 1	0	1
Why does setup.xml with encrypted credentials fail on re-run? It's unclear to me how to allow users to change a stored password via setup.xml. The "Setup page example with user c... by ssanborn Engager in Security 05-29-2018 0 1	0	1
Splunk API call to delete users getting timed out due to DUO mfa. I am trying to delete users in splunk using the splunk api. But its getting timed out due to mfa of DUO Security. Is ... by produte New Member in Security 05-28-2018 0 0	0	0
How to change permissions on Splunk log files? I have a need to monitor splunk logs with other applications, therefore I would like to change all (existing and newl... by dshakespeare_sp Splunk Employee in Security 05-27-2018 9 2	9	2
Can't log in to trial download to complete fundamentals course Hello, I'm trying to complete module 4 of the free fundamentals 1 course. The instructions say you can install a tria... by jmuehlenbein New Member in Security 05-26-2018 0 2	0	2
LDAP Authentication Best Practice 6.6.4 We've been wondering whether modifying the LDAP BIND password through the Web GUI (clustered environment) or modifyin... by halbeisendv Path Finder in Security 05-23-2018 0 1	0	1
Does Splunk support 3rd party certificates without passwords? I have a customer with an internal CA. The private key generated for each host does not have a password. Does Splun... by responsys_cm Builder in Security 05-23-2018 0 1	0	1
Configuration file permissions always reset by splunk Hi, I am having the same issue as this one (https://answers.splunk.com/answers/27128/directory-and-config-file-permis... by Clovisa Path Finder in Security 05-23-2018 0 0	0	0
How can I get the URL path list, visited by the user navigating through a particular application? Hi, I have a requirement where I need to get the list of URL's the user has navigated through while accessing a part... by rakeshyv0807 Explorer in Security 05-22-2018 0 5	0	5
How do I login for the first time? The username and password that I created when I registered to download the product doesn't seem to work. How do I lo... by Alan_Bradley Path Finder in Security 05-21-2018 1 4	1	4
how to reset my splunk enterprise password I downloaded splunk enterprise on my personal Windows 10. I changed my login and password from default admin/changeme... by flau New Member in Security 05-21-2018 0 2	0	2
o365 logins We have been using splunk to help monitor compromised email accounts by looking for logins from countries other than ... by pacificcreek Engager in Security 05-18-2018 1 6	1	6
Scripted SSO auth errors on indexer cluster We have a clustered setup with server types including an indexer cluster, a search head cluster, and a separate clust... by krisreeves Path Finder in Security 05-18-2018 0 2	0	2
How to send individual emails customized in HTML with tokens assigned to each recipient based on one search every 24 hours to warn of password expiry? Hello, I know that there have been previous threads where users have had similar problems, however, I am looking at... by alexandramr Engager in Security 05-17-2018 3 1	3	1
Content management audit Pls tell me how can i track for any activity being done in content management For eg if i have changed drill down fo... by rahul_mckc_splu Loves-to-Learn in Security 05-17-2018 0 0	0	0
Expired server.pem and sslVerifyServerCert = false on splunkforwarder Hello guys, could you let me know if splunkforwarder will continue to work if sslCertPath=$SPLUNK_HOME/etc/auth/serv... by splunkreal Motivator in Security 05-17-2018 0 0	0	0
Installed 3rd party cert yet I'm still getting unsecure webserver from browser? Use openssl to convert pxf file and installed both .key and .pem file in $SPLUNK_HOME/etc/auth/certs/ still browser r... by jrprez1804 Path Finder in Security 05-16-2018 0 4	0	4
Splunkweb referrer missing since 6.5.5 In Splunk 6.5.3, We've been using document.referrer to get the url when linking from Splunk dashboard to external we... by ehudb Contributor in Security 05-16-2018 0 5	0	5
How can I detect change using userswithloginprivs? All, I have a stock install of Splunk for Nix running on 3k hosts or so. What I want to do in reasonable speed is c... by daniel333 Builder in Security 05-15-2018 0 0	0	0
Why does the Azure Instance of Splunk won't accept out-of-the-box SSL certificate? I'm using the Splunk add-on for Microsoft Azure found here: https://azuremarketplace.microsoft.com/en-us/marketplac... by techSUPPORT_198 New Member in Security 05-15-2018 0 3	0	3
Reference to web.conf in login.html Below is my web.conf [settings] serverName = lower_environment_3 I want to display the above serverName detail ... by pradeepkumarg Influencer in Security 05-15-2018 1 3	1	3
Save more than one password using setup.xml OR "storage/passwords" I faced a challenge and tried many things to work around for saving 2 passwords in the password.conf at the same time... by pbankar Path Finder in Security 05-13-2018 0 3	0	3
App cert validation: Do I need to remove the write permissions for all users across all files in the error message? Who are xx2, xx6, xx7 users? Are they specific users or examples of users say x,y, z? According to the given below er... by prpatel322141 New Member in Security 05-12-2018 0 5	0	5