Splunk Enterprise Security

Security Domain: Identity: Identity Center - Password Category

MattQ
Explorer

OK
1. Is there a user guide for ES? I cannot seem to find it
2. What is the 'password' category showing me. I have other specific categories that make sense; user, employee etc. What is password?

0 Karma

jcoates_splunk
Splunk Employee
Splunk Employee

Http://docs.splunk.com/Documentation/ES

Tough to guess the context that you have in mind, where are you looking?

Edit: saw from the title that you're in Identity Center... I think that there is no stock "password" category. Category is a free form field that you can populate with anything. There are some strings that we look for like "email" or "vulnerability", I don't recall password being one of them though.

0 Karma
Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

In December, the Splunk Threat Research Team had 1 release of new security content via the Enterprise Security ...

Why am I not seeing the finding in Splunk Enterprise Security Analyst Queue?

(This is the first of a series of 2 blogs). Splunk Enterprise Security is a fantastic tool that offers robust ...

Index This | What are the 12 Days of Splunk-mas?

December 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...