Security

Community Activity

Need use case query for firewall configuration changes in a network Hi, I am working on creating a use case for changes made in firewall configuration. Whenever a firewall admin making... by ADCW7TQ Explorer in Security 07-28-2017 0 3	0	3
How to integrate SAML authentication for Splunk Cloud? Hi Splunkers, I am working on integrating the SAML authentication for Splunk Cloud. I have a few questions before I ... by ankumar_juniper Explorer in Security 07-27-2017 1 2	1	2
Splunk CAC login / SSO cookie length I'm playing with Splunk 6.6.0 and DOD CAC login (X509 client certificates on a smartcard). The documentation says the... by neutronscott New Member in Security 07-24-2017 0 4	0	4
How to write props & transforms to apply for field aliases and evals for a firewall device. Hi All, Kindly guide me on how to write a props and transforms to apply for a field aliases and evals for a firewall ... by Hemnaath Motivator in Security 07-24-2017 0 7	0	7
Remove search ability users Hi there, I'm trying to set up a monitor/manager account which only has access to dashboards but cannot search throu... by mmoermans Path Finder in Security 07-24-2017 0 4	0	4
Successful Bruteforce login i have two queries for detecting the Brute Force login but not able to get the results. can someone tell me why i'm... by renjujacob88 Path Finder in Security 07-23-2017 1 6	1	6
Splunk Enterprise Login Hello all, I am having problems logging into Enterprise. I've tried my username and password, admin and changeme aft... by dannyze Explorer in Security 07-23-2017 0 9	0	9
Splunk Load Public Certificates Hi, I have public certificates and want to load in Splunk so that i can use HTTPs. How do i do that ? not able to f... by nikhilmehra79 Path Finder in Security 07-20-2017 0 2	0	2
Where can I see the retention policy of the indexes in Splunk Web? I can see the retention policy of the indexes in /opt/splunk/etc/master-apps/_cluster/local/indexes.confin frozenTime... by ddrillic Ultra Champion in Security 07-19-2017 0 3	0	3
Need a list of all the locations of hashed password based on splunk.secret Is there a list of all possible instances of hashed passwords in Splunk that are based on the splunk.secret? I'm inv... by the_wolverine Champion in Security 07-19-2017 0 8	0	8
Splunk Forwarder configure listening ip address. Hello, We have a forwarder with multiple ip address. What is the procedure explicitly set the ip address on the for... by sim_tcr Communicator in Security 07-19-2017 0 3	0	3
How to set up a reverse proxy in front of the Splunk instance? Hello Splunkers. Please can someone help me on How to set up a reverse proxy in front of the Splunk instance ? Tha... by forkingforwardt Engager in Security 07-19-2017 0 4	0	4
Daily Scheduled Data Integrity Workaround Hi, I am looking for an alternative workaround for computing hashes for buckets. It is saying it can be computed for... by cemiam Path Finder in Security 07-18-2017 0 5	0	5
Best method of finding out why a Users AD account keeps getting locked out Hi Guys, We get a number of tickets for users accounts being locked out over and over again, I was wondering if anyo... by AaronMoorcroft Communicator in Security 07-18-2017 0 2	0	2
Edit authentication.conf via CLI I want to change the ldap account adn its password on all the SHs via CLI. I tried changing the ldap account and pas... by saranya_fmr Communicator in Security 07-17-2017 0 9	0	9
Authenticating splunk users from outside of splunkweb authentication of splunk users from outside of splunkweb. we want splunk authentications for my app like username an... by harishalipaka Motivator in Security 07-14-2017 0 1	0	1
Can I use the Splunk ODBC Driver if my network requires a proxy? Can I use the Splunk ODBC Driver if my network requires a proxy? New to Splunk and having difficulty.. by jacobworth1 Explorer in Security 07-12-2017 1 14	1	14
Unable to access the splunk web portal using the URL http:// hostname:8000 Hi All, Currently we are facing an issue in accessing the splunk web interface, as soon as we hit the splunk URL htt... by Hemnaath Motivator in Security 07-12-2017 0 2	0	2
Splunk DB Connect 1: Why am I getting "ERROR HttpListener...Connection closed by peer" when trying to reindex data? I have my Splunk indexing data from a database using DB Connect 1. As data in the DB is fairly static, I have two DBI... by despachoSTD Explorer in Security 07-11-2017 0 2	0	2
how to set encoding of event on indexer cluster hi，Please forgive my English In my indexer cluster,The Chinese in the event shows that there is a coding problem, sh... by xsstest Communicator in Security 07-11-2017 0 7	0	7
Why does Splunk indicate: "Your Splunk license expired or you have exceeded your license limit too many times. " I started with the trial license and have a total uncompressed raw data size of 0.91 GB. How could this exceed the 5... by afgibson1 New Member in Security 07-10-2017 0 3	0	3
How do I reset my password for Splunk enterprise? I am using my original username and password but it doesn't allow me to log in. Any ideas? How do I reset my password for Splunk enterprise? I am using my original username and password but it doesn't allow m... by JKhaneja New Member in Security 07-10-2017 0 3	0	3
License Error when saving Alert (Valid license) I am currently running Splunk 6.4.1 and I am tied into our license master but I am getting a licensing message on one... by philwhite Explorer in Security 07-09-2017 0 3	0	3
Identify admins being added to multiple groups in ad? My search is as follows: (EventCode=4728 OR EventCode=4732 OR EventCode=4756) a_* (Group_Name= OR Group_Name= OR Gro... by mihall Path Finder in Security 07-08-2017 0 2	0	2
Query to calculate Splunk User Session Time Hi, I want to calculate the session time of a user in Splunk. Current scenario is that I have multiple users using s... by MousumiChowdhur Contributor in Security 07-07-2017 1 2	1	2