Security

Community Activity

How do I create Splunk users with Chef? How do I provision Splunk user accounts with Chef? Is this even possible? by aaronclementsny New Member in Security 03-09-2018 0 5	0	5
Can you use 3rd party cert for Splunk Web while using another self-signed client-side cert connecting to Splunk API 8089? It seems the Splunk Web application does not allow for configuration to serve a 3rd party certs for Splunk Web 443, w... by iamjvn Explorer in Security 03-08-2018 0 1	0	1
Hi, i installed the trial version of Splunk on a Linux machine and tried loggin to the url in the browser. The default user name and Pwd for 1st time user which is 'admin' and 'changeme' respectively is not working. Can someone help me on this? Hi, i installed the trial version of Splunk on a Linux machine and tried logging to the url in the browser. The defau... by raghavjha73 New Member in Security 03-07-2018 0 7	0	7
How is the license? Hello Splunk - we have two indexers and one search node (acting as license master). We noticed the search node showin... by kisero Engager in Security 03-07-2018 0 1	0	1
How will changing my SSL versions affect my system We were recently flagged for supporting SSLv2, and we want to change our systems to only support TLS. We run Splunk ... by a212830 Champion in Security 03-07-2018 0 2	0	2
LDAP invalid Credentials HI, I know there are quite a lot of these answers allready, BUT in my case the error message: ERROR ScopedLDAPConne... by dkeck Influencer in Security 03-07-2018 0 2	0	2
SSL between forwarders and indexers How do we encrypt SSL between forwarders and indexers, shouldn't we use the same certificates in both servers. How ... by nawazns5038 Builder in Security 03-06-2018 0 2	0	2
How to replace master node with ldap- reconfig required? I am trying to move master node to a different node. Setup a new node.configured as master node.Modified server.conf... by nathanpaul8 New Member in Security 03-05-2018 0 4	0	4
Is there a Splunk App or Add-on that will help read and comprehend ADFS 3.0 authentication logs? We are working on making sense of our ADFS 3.0 authentication logs. We are currently looking into tying the IP addr... by mgrulke Explorer in Security 03-02-2018 2 7	2	7
How to pass Username and Password as a parameter via Splunk URL? I use the following URL to call Splunk dashboard and pass a device_name as a parameter: http://splunk:8000/en-GB/app... by kiril123 Path Finder in Security 02-28-2018 0 3	0	3
What capability gives users permissions to edit custom alert actions? I have a customer that needs a group of non-Splunk admin users to be able to create and manage custom alert actions. ... by responsys_cm Builder in Security 02-28-2018 0 1	0	1
How to get the passwords the attackers used in a Brute Force Attack? Morning I have been reading this article https://www.splunk.com/blog/2017/06/16/detecting-brute-force-attacks-with... by DDewarSplunk New Member in Security 02-27-2018 0 3	0	3
Custom SSL Cert Issues Hey splunk team, I need a bit (okay a lot of help). I'm not sure what I'm doing wrong, but I'm following these guid... by TitanAE New Member in Security 02-27-2018 0 0	0	0
Trending of top 20 errors comparing previous days errors Hi, I have a requirement to do a trend of today's top 10 errors and then compare the count of those same top 10 erro... by macadminrohit Contributor in Security 02-26-2018 0 7	0	7
NOT ABLE TO READ FROM ZOOKEEPER SERVER The Zookeeper servers are Linux instances which are hosted outside Aviva Network, On the other had the sPlunk Search ... by a12shish New Member in Security 02-26-2018 0 0	0	0
I am new to Splunk: Splunk web not starting. Found error in the logs. 2018-02-22 20:09:35,585 INFO [5a8f77dddd2912bc8c4e0] init:171 - Using default logging config file: C:\Program File... by sudarson95 New Member in Security 02-23-2018 0 2	0	2
Roles lost from cluster Hi , Its strange something that has happened in our cluster today . We find all our roles, except a few , missing fr... by Mohsin123 Path Finder in Security 02-22-2018 0 3	0	3
Why are the errors stopping the user from proceeding in funnel to last/payment page? Hello, I am looking to write a query when I have an error field that is filled when a user cannot continue to make a ... by spark2310 Explorer in Security 02-22-2018 0 0	0	0
How to run a curl command to reassign an abandoned search? Running the curl command noted in the docs:https://docs.splunk.com/Documentation/Splunk/6.5.0/Knowledge/Resolveorphan... by tkwaller Builder in Security 02-21-2018 1 10	1	10
Indexer Discovery Error; pass4SymmKey or SSL? After setting the pass4SymmKey in my master node's server.conf file and in my forwarder's output.conf file I am still... by 22isaiah New Member in Security 02-20-2018 0 6	0	6
Why am I getting a timeout error in Splunk trying to update the LDAP server? Regards, The system displays the following error when I try to update the LDAP Server: Encountered The Following e... by markux Path Finder in Security 02-20-2018 0 8	0	8
Querying Access logs when access to these has been more than twice Morning Guru's, I am looking for a script to show the number of days a log was last accessed. Ive got this working b... by colinmchugo Explorer in Security 02-20-2018 0 7	0	7
Why is the scripted authentication failing after splunk restart? I've just set up scripted authentication with Atlassian Crowd from our Splunk Dev server, and had it working until I ... by thilleso Path Finder in Security 02-19-2018 0 4	0	4
How to add new user with SAML authentication method? Hi, We have configured splunk cloud ADFS account, on ADFS account we have configured group admin and added all relev... by onkarkore1 Explorer in Security 02-18-2018 0 0	0	0
Splunk SAML onelogin : Splunk page is not opening We are trying to configure Splunk SAML onelogin. After we did all the configuration, when i am trying to open Splunk ... by raomu Explorer in Security 02-16-2018 0 0	0	0