Security

Community Activity

How to find user roles that have access to serachindexallowed * or _* I need to find the user roles which has searchindexallowed = " * or _* " The below command list all the roles with se... by sajeshpp Path Finder in Security 11-08-2017 0 1	0	1
Permissions to view knowledge objects but restrict search Hi all, Using Splunk enterprise 6.4.2, is it possible to allow users to view a dashboard that runs some savedsearche... by Tim_1 Path Finder in Security 11-07-2017 0 3	0	3
ADFS splunk saml fail 6.5.1 after configure saml with the following instruction: https://www.splunk.com/blog/2016/09/14/configuring-microsofts-ad... by omerr Explorer in Security 11-07-2017 0 1	0	1
Data rolled to frozen directory is coming as inflight data and it showing size of it as 0. What could be the reason for it ? I am using cifs volume from my storage server for frozen bucket path . by DeepakBhatt New Member in Security 11-03-2017 0 2	0	2
Indexer cluster SSL migration from default SSL to self-signed with least downtime? Hi, 1. Lets assume I have around 4 cluster peers with Splunk's default SSL. To migrate from Splunk's default SSL to ... by inventsekar SplunkTrust in Security 11-02-2017 0 7	0	7
Can Quest's ActiveRoles or ChangeAuditor events/reports be forwarded to Splunk? Has anybody successfully configured getting data from Quest's ActiveRoles and/or ChangeAuditor to Splunk? by mlevsh Builder in Security 11-01-2017 1 2	1	2
How can we set the owner of a saved search from admin to another user? In the following page, we are unable to change the ownership of a saved search - Where can we do it? by ddrillic Ultra Champion in Security 11-01-2017 0 4	0	4
OPSEC LEA SIC ERROR 301 While attempting to debug our LEA connection to our CMA, I'm finding a SIC error that I can not reference anywhere on... by Chubbybunny Splunk Employee in Security 11-01-2017 1 1	1	1
Free Splunk Enterprise edition remote WEB access doesn't let me into the application I access the remote Ubuntu server running free Enterprise on port 8000 and I get the login page. When I put my creden... by kel45 Explorer in Security 10-31-2017 0 3	0	3
Is there a configuration to restart Splunk web without asking for credentials? Hello, Is there a way to restart splunk web without being asked for session credentials? [splunk@splunk]$ splunk re... by marian_coman Explorer in Security 10-31-2017 0 6	0	6
Search ends before it gets to the data cap (500MB) I have a user that is attempting to run a very large search. I raised the role srchDiskQuota but the search is still... by CarsonZa Contributor in Security 10-30-2017 0 4	0	4
How can we add more than 50 indexes to one role in Splunk? How can we add more than 50 indexes to one role in Splunk? I have a role for which the users in this role should be a... by sarahafrin Explorer in Security 10-30-2017 0 1	0	1
Applying custom CSS for Splunk login page in 6.5.2 Hi, We are currently upgrading our Splunk to 6.5.2 version. We had some customizations in the login page previously ... by keerthana_k Communicator in Security 10-28-2017 0 6	0	6
HTTP 401 -- Remote login disabled because you are using a free license which does not provide authentication. I have a working task to create Java-integration with Splunk system that is used by one of our clients. So I installe... by kirillchokparov Explorer in Security 10-26-2017 0 4	0	4
Splunk 7.0.0 management port 8089 - SSL handshake failed After upgrade from Splunk version 6.5.3 to 7.0 management port 8089 - SSL handshake failed through curl or wget. but ... by dhavamanis Builder in Security 10-26-2017 0 3	0	3
SSO on SiteMinder using SAML error message: "Saml response does not contain group information" Hi at all, I have the following problem: We configured SSO with Siteminder using SAML. The problem is that this Site... by gcusello SplunkTrust in Security 10-23-2017 0 1	0	1
Duo Security broken in Splunk 6.3 I'm using the Duo Security Splunk integration to provide 2FA on Splunk Web: https://www.duosecurity.com/docs/splunk ... by awurster Contributor in Security 10-20-2017 0 8	0	8
What is a good search for auditing when someone has accessed or attempted to access a folder on a Redhat 6.3 OS? Greetings, I'm utilizing Splunk Enterprise, and I'm wanting to audit whenever someone attempts to access and/or acce... by CodyQuinney New Member in Security 10-20-2017 0 1	0	1
Add-on certification procedure and time duration Dear Sir/Madam, we have developed the splunk add-on for the some vender storage array, we really want to involve the... by zhanghua_here New Member in Security 10-20-2017 0 2	0	2
LDAP mapping - how to find which groups led to this user? We have configured LDAP mapping groups rules. We have some users found in "Users" page, that we cannot determine how ... by ehudb Contributor in Security 10-18-2017 0 3	0	3
Which firewall logs are supported in Splunk? May I know which firewalls logs are supported and which format it should be. In my organization there is Checkpoint f... by Sagar0511 Explorer in Security 10-18-2017 0 2	0	2
User accounts I've tried to research this issue on my own, but, to no avail and I'm I'm at my wits end. Every so often, all my use... by marg224 New Member in Security 10-18-2017 0 10	0	10
Find user that have latest login I have a listed lookup table xxx . When I run the below search. it shows no results. inputlookup xxxx\|fields USERN... by florencegoh New Member in Security 10-16-2017 0 3	0	3
How can I reset the admin password for the Windows 7 version? Hi, how can I reset the admin password of Splunk Enterprise 6 trial version that was installed in a computer running ... by julivt Explorer in Security 10-16-2017 1 10	1	10
splunk starting as root user how to change this one? Hi Slunk starting as root user, I used chown -R splunk;splunk /opt/splunk/ and its caousing errors when I try to res... by kiran331 Builder in Security 10-14-2017 1 2	1	2