Security

Community Activity

How to add a role to a user? We have SHC and LDAP authentication. we have a role called "RoleA" and I want to add user "AAA" to that role. How can... by maniu1609 Path Finder in Security 12-07-2017 0 3	0	3
Creating SSL certs for SplunkWeb What are most people in the Splunksphere doing for ssl certs on their search heads? ARe you using the splunk generate... by brent_weaver Builder in Security 12-05-2017 1 1	1	1
LDAP Authentication Manager Errors Hi, I have a Splunk stand alone test system that I have successfully configured to use LDAP Authentication. Everythi... by james190190 Explorer in Security 12-05-2017 0 2	0	2
Custom application - Why can't I access some indexes unless I'm using an admin role? Hello splunkers  I have a new issue and I'd like to have your opinion on this. I created a new custom application t... by mvagionakis Path Finder in Security 12-05-2017 0 4	0	4
What setting can I change for a role to give them larger export capabilities? I have a user whose search export results are capping at 10Mb ... But with the admin role I can export well beyond th... by pkeller Contributor in Security 12-03-2017 1 2	1	2
Deploy SSL app to UF and when UF restart, will it connect to deployment server? Hi, SSL certificate renewal from Splunk default to self signed SSL. I would like to create an app with SSL certifica... by inventsekar SplunkTrust in Security 12-01-2017 0 5	0	5
Why am I getting a handshake error trying to set cipherSuite on web.conf to allow only tls=1.2 connection in Splunk 6.2? Hello, I'm trying to set the cipherSuite on web.conf to allow only tls=1.2 connection [settings] enableSplunkWebSSL... by arber Communicator in Security 11-29-2017 1 6	1	6
Login with local account with SSO Okta enabled Hi, We just integrated to Splunk cloud and integrated it with our Okta SSO solution. Is there a way to logon to Spl... by sidekix24 Path Finder in Security 11-29-2017 0 1	0	1
How to replace certificate server.pem to a CA certificate? Hi all, What's the procedure to change from server.pem to CA certificate? Regards. by maffreitas Path Finder in Security 11-29-2017 0 4	0	4
How do I restrict the number of concurrent logins? Hi, Is there any configuration that can set the maximum number of concurrent logins for SplunkWeb? e.g. I don't wan... by melonman Motivator in Security 11-28-2017 2 6	2	6
Why is Splunk Web limited to 50 users when using Scripted Authentication Input for RSA & TFTI? I am using TFTI agent with a splunk script to get user authentication. I use the "usermapping.py" file to map the us... by hartfoml Motivator in Security 11-27-2017 1 2	1	2
Is there a search to identify roles that haven't been used in x-days? I want to do some housekeeping and remove any roles that have not been used for a long time (> 90 days) - is there a ... by vincenp2 New Member in Security 11-27-2017 0 4	0	4
Locked account event tracing Hi, I am quite new to splunk and I was wondering if it was possible to create a real time alert for locked account f... by gmadnani New Member in Security 11-25-2017 0 4	0	4
Splunk SAML Assertion X509Certificate Hi all, Do you know the procedure to change the SAML Assertion X509Certificate (= server.pem) for a certificate sign... by maffreitas Path Finder in Security 11-24-2017 0 3	0	3
SSO with web application firewall and SAML I am investigating placing Splunk behind a web application firewall that handles authentication and general authoriza... by dominiquevocat SplunkTrust in Security 11-24-2017 0 4	0	4
Permissions in cluster Hi, from my old standalone Splunk system I'll migrate to an Splunk Cluster with the following Systems; - 1 Searchhea... by seilemor Engager in Security 11-24-2017 0 9	0	9
Does CLI authentication per LDAP work while web authentication per SAML is activated? We switched our Splunk web authentication from LDAP to SAML. Now when I for example try to "apply cluster-bundle", I... by DennisFFM Explorer in Security 11-23-2017 0 2	0	2
SSO mode permissive but 401 Unauthorized when accessing with an unknown user Hello Everyone, We are facing with an issue with our Splunk configuration : We have currently configured Splunk to a... by gfyhser Engager in Security 11-22-2017 0 2	0	2
Restrict specific users to view only certain panels Hi, I'm currently trying to restrict specific users from viewing certain panels in search app. Sadly juggling aroun... by horsefez Motivator in Security 11-20-2017 2 3	2	3
installing SSL certificates created the have new CA & ssl certs, tweaked /opt/splunk/etc/system/local/web.conf to say privkeypath = $SPLUNK_HOME... by ssackrider Explorer in Security 11-20-2017 0 3	0	3
Newb trying to get unique count of users... failing miserably. I'm trying to get a unique list of users accessing Essbase servers and databases daily/monthly/qtrly but am strugglin... by Adam_Marx Explorer in Security 11-20-2017 0 4	0	4
What takes precedence? Global KO permissions or app share permissions? This is confusing me greatly so forgive me if my explanation is not clear but I will try to explain: I have a dashbo... by soniquella Path Finder in Security 11-20-2017 0 2	0	2
Restrict access to part of the data of an index but allow access to other indexes I have a role assigned to an AD group that limits their access to specific events in a windows event log index. The r... by MikeBertelsen Communicator in Security 11-17-2017 0 2	0	2
How do you actually delete a user in the Splunk web UI? When I go to Users in the Splunk web UI, there is no option/action available next to the user accounts. I have tried ... by gsypsomos Engager in Security 11-17-2017 0 5	0	5
Can I add two roles to a user account in Splunk by using CLI command? for example, I need to add an admin user with "can_delete" & "admin" role. In splunk doc, I can see that the followi... by weiwongfaye Engager in Security 11-15-2017 2 3	2	3