Security

Community Activity

Is it possible in Splunk to know who has disabled a saved search and when? Hi! I would like to know is there a way to find out when a savedsearch has been disabled and who has disabled the sa... by MousumiChowdhur Contributor in Security 09-26-2017 3 1	3	1
IBM Siteprotector. Anybody use splunk to index IBM(ISS) SiteProtector events. Is there a syslog configuraton for Siteprotector? It has... by davecroto Splunk Employee in Security 09-26-2017 2 7	2	7
I want to Shows last login time for users who have ever logged into AIX. I want to Shows last login time for users who have ever logged in AIX. And enable the lastlog stanza: [script://./bin... by gif_support New Member in Security 09-26-2017 0 3	0	3
curl (35) error Rest API When I try to run this command in REST API curl -k -vvv -u user:pass -d "search=savedsearch %22My%20Search%22" https... by zackh123 Path Finder in Security 09-26-2017 0 7	0	7
Help with Add-on permissions Our customer installed our Addon using an admin account. Now the admin wants to give a power user permission to modif... by irsysintegratio Path Finder in Security 09-25-2017 0 7	0	7
Why am I unable to log in to Splunk Web? I just installed Splunk enterprise in my laptop but when I am trying to access Splunk web, i goes to a link (http://l... by pnpayawan New Member in Security 09-25-2017 0 2	0	2
Splunkweb - slow startup Hi, splunkweb takes ages to start. it even runs into an internal timeout and only with some tweaking (touch /appl/sp... by kochera Communicator in Security 09-22-2017 0 7	0	7
Waiting for web server at https:// (Web Services takes a long time to load) when I do a ./splunk restart it seems to stop and start normally accept that the web server seems to take a long time... by hartfoml Motivator in Security 09-22-2017 0 3	0	3
Splunk Single Sign-On With F5 Big-IP I am curious if anyone has attempted to or is currently using an F5 Big-IP LTM as a reverse proxy for Splunk web. I'v... by da7rutrak Explorer in Security 09-22-2017 2 7	2	7
Need a new Splunk Enterprise trial license for fundamentals training I have installed Splunk Enterprise trial version in the past to learn how to use Splunk. Now, I have been invited fo... by Danny83Karouw New Member in Security 09-22-2017 0 14	0	14
PCI compliance and Splunk Hi folks, My company got Enterprise Splunk and we want to integrate Splunk and PCI compliance. I am New to it so can ... by balkanbgboy New Member in Security 09-21-2017 0 2	0	2
Removed users from LDAP authentication but didn't remove them from Splunk users Hello, I see that there is documentation on this topic, but it is very unclear how it should be operating. So I am u... by katzr Path Finder in Security 09-17-2017 0 4	0	4
Accidentally Removed the admin role, now my admin account won't work. While trying to create another admin role, somehow I removed all the capabilities from the original admin role. Now I... by drewrogers Engager in Security 09-15-2017 0 3	0	3
Why my remote access do not have a login page? Hi all, I m new to splunk. I m trying the splunk free license taking in some of my raspberry pi data. When I m tryin... by quahfamili Path Finder in Security 09-14-2017 0 1	0	1
Port issue with splunkd SSL Hello, We want to enable Splunkd SSL, so we put enableSplunkdSSL = true to server.conf. We generated a certificate ... by irsysintegratio Path Finder in Security 09-14-2017 0 1	0	1
How do I tell if we are using Splunk Web? I am using Splunk Enterprise 6.6.1 and there is a security vulnerability that exploits Splunk Web that is resolved in... by mpwhite New Member in Security 09-13-2017 0 1	0	1
Why am I getting a port error when opening Splunk Enterprise (free trial)? Team, I've installed Splunk Enterprise free version in my machine since i am learning splunk, installation was succ... by nnandi New Member in Security 09-13-2017 0 2	0	2
Indexer unable to contact licence master Hi All, have 1 license master/search head and 3 indexers, as of about 2 weeks ago all 3 indexers lost contact to the... by Jamesfirth New Member in Security 09-12-2017 0 4	0	4
print the error code count I want to create the dashboard to show error count for specific execution group on specific broker, Below is the quer... by ajaynaralikar New Member in Security 09-11-2017 0 5	0	5
Why are new users accounts using LDAP and established groups not appearing in Splunk? After having system admin create new Active Directory account and asking to be put in establish Splunk group (along w... by cjsweeney1 Explorer in Security 09-11-2017 0 2	0	2
Certificate generation failed : Splunkd port communication will not work Hi, On start up I am getting this error: The certificate generation script did not generate the certificate file: /... by dkeck Influencer in Security 09-09-2017 0 2	0	2
Splunk DB Connect 1: Why am I getting Oracle DB connection Error "ORA-01882: timezone region not found"? After going through some of the posts here, I am still facing the same issue. Basically trying to connect to an Oracl... by muralianup Communicator in Security 09-08-2017 1 12	1	12
How to generate a server.pem key size of 2048? I have a security finding that the server.pem key size is 1024, and needs to be 2048. In the question titled "How to ... by rkilen Explorer in Security 09-07-2017 1 7	1	7
Index strategy? Single index or multiple indexes? Hi there, I have around 80 servers and about 300 folders in all of them. Should we use a single index or use a mult... by archananaveen Explorer in Security 09-07-2017 0 7	0	7
Best Practice: Owner for shared search assets (Searches, Reports, Dashboards etc.) Hello All What is the best practice for assigning ownership of shared search assets? (Dashboard used by the whole te... by nirmalrajneupan Explorer in Security 09-07-2017 0 3	0	3