Security

Community Activity

How to add a new Active Directory group to an existing LDAP strategy? We recently created a new group in Active Directory to support a new set of users we want to have access to splunk wi... by brendan_wilson Engager in Security 12-21-2017 0 3	0	3
401 Unauthorized - REST API using GuzzleHttp I am using GuzzleHttp Login call " services/auth/login " works fine and I get the session token as well. but after ... by sandyapps New Member in Security 12-21-2017 0 2	0	2
Can we access Splunk using a subsite configuration? Hi, How can we configure splunk to be accessibla within a subsite, by exampleȘ https://something.com/subsite/.... We... by mfamd New Member in Security 12-20-2017 0 1	0	1
Monitoring communication between source and destination that use SSL or TLS Hi. Which you know apps that can track communication between src and dest hosts that use SSL or TLS encryption proto... by test_qweqwe Builder in Security 12-20-2017 0 3	0	3
Splunk user login failure with "404 Not found" error I have a Splunk role say 'test_role' with following capabilities and have a user 'testuser' under this 'test_role' wi... by sajeeshpn New Member in Security 12-19-2017 0 4	0	4
Indexes are not available to select from "Available search indexes" during role creation since upgrade to 7.0.0 Since upgrading to splunk 7.0.0 I am not able to select our indexes from our indexcluster from "Available search inde... by fboeje Explorer in Security 12-19-2017 6 6	6	6
How to remediate when running testssl.sh against Splunk server reveals vulnerability to "Secure Client-Initiated Renegotiation"? I ran the testssl.sh tool against my Splunk server and it came back saying that I was vulnerable to "Secure Client-In... by xavierashe Contributor in Security 12-14-2017 0 3	0	3
Can I rename a user without deleting and recreating the user? For my customers i have added multiple users to run searches and create dashboards. Now an users name has changed and... by HeL42 Engager in Security 12-13-2017 1 4	1	4
Is there a rest call to get license pools and members of those pools? Hi, Is there a rest/search call that will show me the pool names and members (real names, not GID) of those pools? by a212830 Champion in Security 12-13-2017 0 3	0	3
View Contents of Authorize.conf from Web GUI Hi All, I was wondering if someone could provide a search string that would list Users present within my Splunk Clou... by MikeElliott Communicator in Security 12-12-2017 0 1	0	1
Different data acceleration methods Hello There are 3 methods for data acceleration, each method has specific constraints 1). Summary indexing - It's s... by Thuan Explorer in Security 12-12-2017 0 1	0	1
How can I restrict user access to write to an index? Use of the collect command, or enabling summary indexing for a report, this feature allows a user/role to write to an... by mkolkebeck Path Finder in Security 12-12-2017 1 1	1	1
Splunk File presedence I know the configuration file precedence, my question is if /system/local is first path of a configuration file then ... by ansif Motivator in Security 12-08-2017 0 2	0	2
need a credentials file instead of --auth user:passwd I want to script this for backups: splunk _internal call /data/indexes/main/roll-hot-buckets --auth 'username:passwo... by ronerf Explorer in Security 12-07-2017 0 3	0	3
log's error code so that base on error code splunk can notify I want to know error codes we can take from multiple services of hadoop like hbase , hive ..etc so base on those erro... by anurag_mishra93 New Member in Security 12-07-2017 0 1	0	1
grant access to splunk where to grant access ..in access control ? give me steps please give me detailed steps on how to gove splunk access ... by Mohsin123 Path Finder in Security 12-07-2017 0 2	0	2
How to add a role to a user? We have SHC and LDAP authentication. we have a role called "RoleA" and I want to add user "AAA" to that role. How can... by maniu1609 Path Finder in Security 12-07-2017 0 3	0	3
Creating SSL certs for SplunkWeb What are most people in the Splunksphere doing for ssl certs on their search heads? ARe you using the splunk generate... by brent_weaver Builder in Security 12-05-2017 1 1	1	1
LDAP Authentication Manager Errors Hi, I have a Splunk stand alone test system that I have successfully configured to use LDAP Authentication. Everythi... by james190190 Explorer in Security 12-05-2017 0 2	0	2
Custom application - Why can't I access some indexes unless I'm using an admin role? Hello splunkers  I have a new issue and I'd like to have your opinion on this. I created a new custom application t... by mvagionakis Path Finder in Security 12-05-2017 0 4	0	4
What setting can I change for a role to give them larger export capabilities? I have a user whose search export results are capping at 10Mb ... But with the admin role I can export well beyond th... by pkeller Contributor in Security 12-03-2017 1 2	1	2
Deploy SSL app to UF and when UF restart, will it connect to deployment server? Hi, SSL certificate renewal from Splunk default to self signed SSL. I would like to create an app with SSL certifica... by inventsekar SplunkTrust in Security 12-01-2017 0 5	0	5
Why am I getting a handshake error trying to set cipherSuite on web.conf to allow only tls=1.2 connection in Splunk 6.2? Hello, I'm trying to set the cipherSuite on web.conf to allow only tls=1.2 connection [settings] enableSplunkWebSSL... by arber Communicator in Security 11-29-2017 1 6	1	6
Login with local account with SSO Okta enabled Hi, We just integrated to Splunk cloud and integrated it with our Okta SSO solution. Is there a way to logon to Spl... by sidekix24 Path Finder in Security 11-29-2017 0 1	0	1
How to replace certificate server.pem to a CA certificate? Hi all, What's the procedure to change from server.pem to CA certificate? Regards. by maffreitas Path Finder in Security 11-29-2017 0 4	0	4