Security

Community Activity

Qualys app is having an issue in retrieving the password from the app file ? Hi All Currently we are facing an issue in retrieving the password from the app file and we are getting the below err... by Hemnaath Motivator in Security 11-13-2017 0 7	0	7
How Many CPEs for the User and Power User Certificate? I would like to know how many CPE hours are designated to the User and Power User Course hours and the certificates. ... by Zomebry New Member in Security 11-10-2017 0 2	0	2
How to get login id of current user ? Hello I want to set "User Search Filter" for LDAP some tool support as like "This filter is used to determine t... by Kyeryeon New Member in Security 11-09-2017 0 4	0	4
How to Restrict Index to only one user? Hello, I need to upload sensitive data into Splunk to do my analysis, and I only want myself to be able to see the d... by katzr Path Finder in Security 11-08-2017 0 9	0	9
How can I validate the logging of successful connections to Edge Firewall Our firewall team has told us that they have turned on logging for successful connection for edge firewall. How can y... by AJeepDude New Member in Security 11-08-2017 0 2	0	2
How to find user roles that have access to serachindexallowed * or _* I need to find the user roles which has searchindexallowed = " * or _* " The below command list all the roles with se... by sajeshpp Path Finder in Security 11-08-2017 0 1	0	1
Permissions to view knowledge objects but restrict search Hi all, Using Splunk enterprise 6.4.2, is it possible to allow users to view a dashboard that runs some savedsearche... by Tim_1 Path Finder in Security 11-07-2017 0 3	0	3
ADFS splunk saml fail 6.5.1 after configure saml with the following instruction: https://www.splunk.com/blog/2016/09/14/configuring-microsofts-ad... by omerr Explorer in Security 11-07-2017 0 1	0	1
Data rolled to frozen directory is coming as inflight data and it showing size of it as 0. What could be the reason for it ? I am using cifs volume from my storage server for frozen bucket path . by DeepakBhatt New Member in Security 11-03-2017 0 2	0	2
Indexer cluster SSL migration from default SSL to self-signed with least downtime? Hi, 1. Lets assume I have around 4 cluster peers with Splunk's default SSL. To migrate from Splunk's default SSL to ... by inventsekar SplunkTrust in Security 11-02-2017 0 7	0	7
Can Quest's ActiveRoles or ChangeAuditor events/reports be forwarded to Splunk? Has anybody successfully configured getting data from Quest's ActiveRoles and/or ChangeAuditor to Splunk? by mlevsh Builder in Security 11-01-2017 1 2	1	2
How can we set the owner of a saved search from admin to another user? In the following page, we are unable to change the ownership of a saved search - Where can we do it? by ddrillic Ultra Champion in Security 11-01-2017 0 4	0	4
OPSEC LEA SIC ERROR 301 While attempting to debug our LEA connection to our CMA, I'm finding a SIC error that I can not reference anywhere on... by Chubbybunny Splunk Employee in Security 11-01-2017 1 1	1	1
Free Splunk Enterprise edition remote WEB access doesn't let me into the application I access the remote Ubuntu server running free Enterprise on port 8000 and I get the login page. When I put my creden... by kel45 Explorer in Security 10-31-2017 0 3	0	3
Is there a configuration to restart Splunk web without asking for credentials? Hello, Is there a way to restart splunk web without being asked for session credentials? [splunk@splunk]$ splunk re... by marian_coman Explorer in Security 10-31-2017 0 6	0	6
Search ends before it gets to the data cap (500MB) I have a user that is attempting to run a very large search. I raised the role srchDiskQuota but the search is still... by CarsonZa Contributor in Security 10-30-2017 0 4	0	4
How can we add more than 50 indexes to one role in Splunk? How can we add more than 50 indexes to one role in Splunk? I have a role for which the users in this role should be a... by sarahafrin Explorer in Security 10-30-2017 0 1	0	1
Applying custom CSS for Splunk login page in 6.5.2 Hi, We are currently upgrading our Splunk to 6.5.2 version. We had some customizations in the login page previously ... by keerthana_k Communicator in Security 10-28-2017 0 6	0	6
HTTP 401 -- Remote login disabled because you are using a free license which does not provide authentication. I have a working task to create Java-integration with Splunk system that is used by one of our clients. So I installe... by kirillchokparov Explorer in Security 10-26-2017 0 4	0	4
Splunk 7.0.0 management port 8089 - SSL handshake failed After upgrade from Splunk version 6.5.3 to 7.0 management port 8089 - SSL handshake failed through curl or wget. but ... by dhavamanis Builder in Security 10-26-2017 0 3	0	3
SSO on SiteMinder using SAML error message: "Saml response does not contain group information" Hi at all, I have the following problem: We configured SSO with Siteminder using SAML. The problem is that this Site... by gcusello SplunkTrust in Security 10-23-2017 0 1	0	1
Duo Security broken in Splunk 6.3 I'm using the Duo Security Splunk integration to provide 2FA on Splunk Web: https://www.duosecurity.com/docs/splunk ... by awurster Contributor in Security 10-20-2017 0 8	0	8
What is a good search for auditing when someone has accessed or attempted to access a folder on a Redhat 6.3 OS? Greetings, I'm utilizing Splunk Enterprise, and I'm wanting to audit whenever someone attempts to access and/or acce... by CodyQuinney New Member in Security 10-20-2017 0 1	0	1
Add-on certification procedure and time duration Dear Sir/Madam, we have developed the splunk add-on for the some vender storage array, we really want to involve the... by zhanghua_here New Member in Security 10-20-2017 0 2	0	2
LDAP mapping - how to find which groups led to this user? We have configured LDAP mapping groups rules. We have some users found in "Users" page, that we cannot determine how ... by ehudb Contributor in Security 10-18-2017 0 3	0	3