Security

Community Activity

How to monitor only .log files from a directory Hello, Could someone help me how to monitor only log files in a directory and in sub directories using CLI command t... by druvakumar Path Finder in Security 04-23-2018 0 1	0	1
Does Splunk need Internet Access to work? We have a licensed Splunk 5.0 installation that will not be allowed to access the internet. The splunkd.log shows tw... by john_goody_bt Engager in Security 04-23-2018 0 3	0	3
How to cherry pick fields from raw xml records before indexing I have several raw xml events that are getting indexed from a monitored log. The log is forwarded from a universal fo... by riotto Path Finder in Security 04-22-2018 0 2	0	2
What settings do I need to change to regain permissions to read metrics.log? Hi Splunkers, I have lost permissions to read the metrics logs. I have asked the platform team and they have updated... by seema2502 Explorer in Security 04-22-2018 0 7	0	7
Why is the dashboard showing "user doesn't exist" in panels? I have a user which when he loads a dashboard only gets " [his username] doesn't exist" in the panels where the resul... by scottj1y Path Finder in Security 04-21-2018 0 3	0	3
Is it necessary to create indices, both on Search Head and Indexer? Hello guys, After creating my indices in the Indexer and configure it as a search peer of my Search Head, I was able... by davidcruz Explorer in Security 04-20-2018 0 2	0	2
cisco security suite setup bug? I have recently set up CIsco Security suite and I'm confused as to what happened in the setup. I have an ASA firewal... by djhoskins Engager in Security 04-18-2018 0 2	0	2
How do I configure my firewall to let Metasploitable VM forward to my host windows machine? I am looking to play with some backdoors and exploits for research purposes, so I have a Metasploitable VM set up. I'... by tweilersec New Member in Security 04-18-2018 0 5	0	5
Why am I getting a 404 error in the browser console? Hi good day I followed the installation as it should be but when I log in it sends me the error GET http://localhost... by colaborador3 New Member in Security 04-17-2018 0 1	0	1
New Authentication from Previously Unseen Source Hi Team, I'm wondering if anyone can assist? I'm attempting to write a search that will identify when a privileged ... by MikeElliott Communicator in Security 04-16-2018 0 7	0	7
How to implement restrictions on characters, size etc in Input type=Text Hi, I have a text box input where a user is supposed to enter certain details. Is there a way to restrict the number... by christal1989 New Member in Security 04-12-2018 0 1	0	1
Multiple owners of knowledge objects Is it possible to configure more than 1 owners of a dashboard/report? We want to give write perms to a few individual... by tusharsaran1 Path Finder in Security 04-12-2018 0 5	0	5
SSL Error for Connection between Forwarder and Indexer Hi All Below are the Errors I see in Splunkd.log of Forwarder and Indexer. & trying to figure out how to fix these. ... by PowerPacked Builder in Security 04-11-2018 0 1	0	1
Modifying saved search permissions using the python SDK I'm trying to modify a saved search's permissions using the python SDK and I'm running into problems. Basically I'm ... by erichar7 Explorer in Security 04-11-2018 0 5	0	5
[HELP] No events from remote FileServer - SECURITY log I can't seem to get this figured out. I've tried adding the stanzas to the output.conf file on my fileserver where th... by akmartin New Member in Security 04-11-2018 0 3	0	3
Unable to search & getting this error : Unable to evict enough data Hello, I have been trying to troubleshoot this for a while, and I am not sure if these two things are connected, but... by oosegueda New Member in Security 04-11-2018 0 1	0	1
LDAP authentication to Active Directory Trusts I have an environment where users are authenticated against a domain, and this works perfectly. However I would like ... by gonz0 New Member in Security 04-10-2018 0 1	0	1
How to display people who have NOT changed their passwords in the last month? So I don't have trouble displaying people who have changed their password but I don't know how to display users who d... by kiamco Path Finder in Security 04-09-2018 0 7	0	7
How to take mcafee virus scan and endpoint security version information into account? Hello, The EPOProdPropsView_VIRUSCAN fields are not present in the new version of McAfee : Endpoint Security replace... by SarahSplunk123 Explorer in Security 04-09-2018 0 0	0	0
Unable to access splunkweb remotely on splunk 7.02 I have all the firewall disabled. And I also see splunkd is listening on port 8000, but I am not able to connect it v... by sshres5 Communicator in Security 04-05-2018 1 5	1	5
Tracking Failed Logins by Usernames, reason for failure, and more We have a simple query which tracks failed login attempts, however, the eventstats function is unable to give me the ... by ypop New Member in Security 04-04-2018 0 2	0	2
Splunk Automatic Lookups and Capitlization What is a work around for case sensitive automatic lookups? I am trying to build out an automatic lookup for users an... by jmcclure Explorer in Security 04-04-2018 0 2	0	2
How to configure Active Directory / LDAP Integration between AD trees? We have ~50 domains across the organization who want to join in and use Splunk. They all have two way trust enabled... by splunkIT Splunk Employee in Security 04-04-2018 2 3	2	3
Since splunk 6.4 some users do not see the "export" button anymore I noticed that after upgrading to splunk 6.4, my user with a custom role cannot see the "export" button on the botto... by yannK Splunk Employee in Security 04-03-2018 4 2	4	2
DMC protocol/port used to check indexers status? Hello, Since we have moved our indexers cluster servers behind a firewall, the DMC is showing all indexers as "unrea... by gdigrego Path Finder in Security 04-03-2018 0 1	0	1