Security

Community Activity

WARN TcpOutputProc - Forwarding to indexer group group1 blocked for 10 seconds. Hello there. I am seeing hte subject message in my HEC HWF servers. We are using index discovery and the following is... by brent_weaver Builder in Security 01-04-2018 1 4	1	4
Why is my default app not loading when Users login? I have tried many things and googled, but unable to find a solution to this issue. I have an environment that I have... by Kozanic Path Finder in Security 01-03-2018 0 3	0	3
How to configure exceptions to proxy config in splunk-launch.conf? Hi, to support several external lookups to internet services with APIs I added a proxy configuration to splunk-launc... by flle Path Finder in Security 01-03-2018 0 4	0	4
Is it possible to use LDAP Authentication and Radius Authentication together? Is it possible to use LDAP Authentication and Radius Authentication together? Is it possible to set some kind of prio... by sbbadri Motivator in Security 01-03-2018 0 1	0	1
Permission Denied when checking status of Splunk I get these errors when trying to check the status of SPLUNK after a restart of the device: Pid file "/trvapps/splunk... by pfabrizi Path Finder in Security 01-03-2018 0 4	0	4
SSl Error saying the port number is wrong Trying to connect from vendor UF to our indexer through configuring SSL certificate. We have enabled SSL on both side... by vinaykata Path Finder in Security 01-02-2018 0 1	0	1
timestamp issue I have firewall events coming to my syslog-ng server. The firewall events are in Central European Timezone, so when ... by mcbradford Contributor in Security 01-02-2018 0 4	0	4
How do you check successful brute force logins? Is there a better way to check sucessful brute force logins? raw event (this is a microsoft exchange web access log)... by xsstest Communicator in Security 12-28-2017 0 8	0	8
logged in user temporarily drop a role We are developing an app with dashboards which are only shown if the current user has certain Splunk roles, this role... by FritzWittwer_ol Contributor in Security 12-22-2017 0 2	0	2
How to add a new Active Directory group to an existing LDAP strategy? We recently created a new group in Active Directory to support a new set of users we want to have access to splunk wi... by brendan_wilson Engager in Security 12-21-2017 0 3	0	3
401 Unauthorized - REST API using GuzzleHttp I am using GuzzleHttp Login call " services/auth/login " works fine and I get the session token as well. but after ... by sandyapps New Member in Security 12-21-2017 0 2	0	2
Can we access Splunk using a subsite configuration? Hi, How can we configure splunk to be accessibla within a subsite, by exampleȘ https://something.com/subsite/.... We... by mfamd New Member in Security 12-20-2017 0 1	0	1
Monitoring communication between source and destination that use SSL or TLS Hi. Which you know apps that can track communication between src and dest hosts that use SSL or TLS encryption proto... by test_qweqwe Builder in Security 12-20-2017 0 3	0	3
Splunk user login failure with "404 Not found" error I have a Splunk role say 'test_role' with following capabilities and have a user 'testuser' under this 'test_role' wi... by sajeeshpn New Member in Security 12-19-2017 0 4	0	4
Indexes are not available to select from "Available search indexes" during role creation since upgrade to 7.0.0 Since upgrading to splunk 7.0.0 I am not able to select our indexes from our indexcluster from "Available search inde... by fboeje Explorer in Security 12-19-2017 6 6	6	6
How to remediate when running testssl.sh against Splunk server reveals vulnerability to "Secure Client-Initiated Renegotiation"? I ran the testssl.sh tool against my Splunk server and it came back saying that I was vulnerable to "Secure Client-In... by xavierashe Contributor in Security 12-14-2017 0 3	0	3
Can I rename a user without deleting and recreating the user? For my customers i have added multiple users to run searches and create dashboards. Now an users name has changed and... by HeL42 Engager in Security 12-13-2017 1 4	1	4
Is there a rest call to get license pools and members of those pools? Hi, Is there a rest/search call that will show me the pool names and members (real names, not GID) of those pools? by a212830 Champion in Security 12-13-2017 0 3	0	3
View Contents of Authorize.conf from Web GUI Hi All, I was wondering if someone could provide a search string that would list Users present within my Splunk Clou... by MikeElliott Communicator in Security 12-12-2017 0 1	0	1
Different data acceleration methods Hello There are 3 methods for data acceleration, each method has specific constraints 1). Summary indexing - It's s... by Thuan Explorer in Security 12-12-2017 0 1	0	1
How can I restrict user access to write to an index? Use of the collect command, or enabling summary indexing for a report, this feature allows a user/role to write to an... by mkolkebeck Path Finder in Security 12-12-2017 1 1	1	1
Splunk File presedence I know the configuration file precedence, my question is if /system/local is first path of a configuration file then ... by ansif Motivator in Security 12-08-2017 0 2	0	2
need a credentials file instead of --auth user:passwd I want to script this for backups: splunk _internal call /data/indexes/main/roll-hot-buckets --auth 'username:passwo... by ronerf Explorer in Security 12-07-2017 0 3	0	3
log's error code so that base on error code splunk can notify I want to know error codes we can take from multiple services of hadoop like hbase , hive ..etc so base on those erro... by anurag_mishra93 New Member in Security 12-07-2017 0 1	0	1
grant access to splunk where to grant access ..in access control ? give me steps please give me detailed steps on how to gove splunk access ... by Mohsin123 Path Finder in Security 12-07-2017 0 2	0	2