Security

Community Activity

Why am I getting the JMS modular input error? can someone help me with the below error message 03-14-2018 18:08:27.361 +0100 INFO ExecProcessor - interval: ... by arunsundaram New Member in Security 03-17-2018 0 2	0	2
Failed to index data && SSL CERTIFICATE_VERIFY_FAILED Hello everyone, I have two problem  First, Failed to index data: 2018-03-16 12:44:46,945 +0000 log_level=ERROR, pi... by rasty Path Finder in Security 03-16-2018 0 1	0	1
Can Splunk encryption and compression be completely disabled? We have a Pure FlashArray which can offload compression and encryption and do a much better job of data reduction ove... by grwright5 New Member in Security 03-16-2018 0 2	0	2
How do I access collection.conf to assign write permissions for kvstore? Users are able to view the data in the kvstore I created. I am unable to find the kvstore under settings > lookups,... by gibronda Explorer in Security 03-14-2018 0 2	0	2
What happens when a user logs on? _audit shows they are "denied" several administrative actions just by logging on.. I was trying to audit my user base to find anyone in need of knuckle rapping or public flogging and I was stunned by ... by lycollicott Motivator in Security 03-14-2018 0 3	0	3
Why is the web service is stuck on 127.0.0.1 with third party certificates creation? Hi guys- I've created third party certificates for our splunk instance, using the splunk-provided documentation. My i... by cpierce26 New Member in Security 03-13-2018 0 2	0	2
Substituting token names again Simple question I hope. I have a dashboard that uses many tokens from input drop downs, which allow the user to caus... by johnjester Explorer in Security 03-09-2018 0 3	0	3
Why is Splunk not indexing all the data from the log file? Hi We have a script that stores all the user commands to a log file named commands.log and entire file is monitored ... by zealvora Engager in Security 03-09-2018 0 2	0	2
How do I create Splunk users with Chef? How do I provision Splunk user accounts with Chef? Is this even possible? by aaronclementsny New Member in Security 03-09-2018 0 5	0	5
Can you use 3rd party cert for Splunk Web while using another self-signed client-side cert connecting to Splunk API 8089? It seems the Splunk Web application does not allow for configuration to serve a 3rd party certs for Splunk Web 443, w... by iamjvn Explorer in Security 03-08-2018 0 1	0	1
Hi, i installed the trial version of Splunk on a Linux machine and tried loggin to the url in the browser. The default user name and Pwd for 1st time user which is 'admin' and 'changeme' respectively is not working. Can someone help me on this? Hi, i installed the trial version of Splunk on a Linux machine and tried logging to the url in the browser. The defau... by raghavjha73 New Member in Security 03-07-2018 0 7	0	7
How is the license? Hello Splunk - we have two indexers and one search node (acting as license master). We noticed the search node showin... by kisero Engager in Security 03-07-2018 0 1	0	1
How will changing my SSL versions affect my system We were recently flagged for supporting SSLv2, and we want to change our systems to only support TLS. We run Splunk ... by a212830 Champion in Security 03-07-2018 0 2	0	2
LDAP invalid Credentials HI, I know there are quite a lot of these answers allready, BUT in my case the error message: ERROR ScopedLDAPConne... by dkeck Influencer in Security 03-07-2018 0 2	0	2
SSL between forwarders and indexers How do we encrypt SSL between forwarders and indexers, shouldn't we use the same certificates in both servers. How ... by nawazns5038 Builder in Security 03-06-2018 0 2	0	2
How to replace master node with ldap- reconfig required? I am trying to move master node to a different node. Setup a new node.configured as master node.Modified server.conf... by nathanpaul8 New Member in Security 03-05-2018 0 4	0	4
Is there a Splunk App or Add-on that will help read and comprehend ADFS 3.0 authentication logs? We are working on making sense of our ADFS 3.0 authentication logs. We are currently looking into tying the IP addr... by mgrulke Explorer in Security 03-02-2018 2 7	2	7
How to pass Username and Password as a parameter via Splunk URL? I use the following URL to call Splunk dashboard and pass a device_name as a parameter: http://splunk:8000/en-GB/app... by kiril123 Path Finder in Security 02-28-2018 0 3	0	3
What capability gives users permissions to edit custom alert actions? I have a customer that needs a group of non-Splunk admin users to be able to create and manage custom alert actions. ... by responsys_cm Builder in Security 02-28-2018 0 1	0	1
How to get the passwords the attackers used in a Brute Force Attack? Morning I have been reading this article https://www.splunk.com/blog/2017/06/16/detecting-brute-force-attacks-with... by DDewarSplunk New Member in Security 02-27-2018 0 3	0	3
Custom SSL Cert Issues Hey splunk team, I need a bit (okay a lot of help). I'm not sure what I'm doing wrong, but I'm following these guid... by TitanAE New Member in Security 02-27-2018 0 0	0	0
Trending of top 20 errors comparing previous days errors Hi, I have a requirement to do a trend of today's top 10 errors and then compare the count of those same top 10 erro... by macadminrohit Contributor in Security 02-26-2018 0 7	0	7
NOT ABLE TO READ FROM ZOOKEEPER SERVER The Zookeeper servers are Linux instances which are hosted outside Aviva Network, On the other had the sPlunk Search ... by a12shish New Member in Security 02-26-2018 0 0	0	0
I am new to Splunk: Splunk web not starting. Found error in the logs. 2018-02-22 20:09:35,585 INFO [5a8f77dddd2912bc8c4e0] init:171 - Using default logging config file: C:\Program File... by sudarson95 New Member in Security 02-23-2018 0 2	0	2
Roles lost from cluster Hi , Its strange something that has happened in our cluster today . We find all our roles, except a few , missing fr... by Mohsin123 Path Finder in Security 02-22-2018 0 3	0	3