Splunk Enterprise Security

Splunk Enterprise Security
Community Activity
samyool36
I have an alert set up in my Splunk Enterprise Security environment that is set to trigger when we receive a notable ...
by samyool36 Explorer in Splunk Enterprise Security 09-26-2018
0 5
0
5
ranjitbrhm1
Good day everyone. I have a query. I have configured all the Enterprise Security threat intelligence to download vi...
by ranjitbrhm1 Communicator in Splunk Enterprise Security 09-26-2018
0 1
0
1
ehowardl3
I have identity information I am pulling from two different sources in two different lookup tables. One lookup table ...
by ehowardl3 Path Finder in Splunk Enterprise Security 09-25-2018
0 2
0
2
Tylerdygert
Hello, I am trying to create a dashboard for Splunk Enterprise Security to track incident response. I have a search ...
by Tylerdygert Path Finder in Splunk Enterprise Security 09-25-2018
0 4
0
4
Tylerdygert
Cisco ASA Regex filtering needed Hello Splunk community, I am in need of some regex help. We have been receiving a...
by Tylerdygert Path Finder in Splunk Enterprise Security 09-25-2018
0 2
0
2
deastman
I'm currently looking for others input on how they ingest EfficentIP data sources. Does anyone actively ingest Effic...
by deastman Path Finder in Splunk Enterprise Security 09-25-2018
0 0
0
0
kokanne
I need to make a report once a month that indicates the trend between the succesful / unsuccesful log-ins on the netw...
by kokanne Communicator in Splunk Enterprise Security 09-24-2018
1 2
1
2
bhimija
Is it possible to change default status value from "All" to New & "In Progress" via GUI in the Incident Review dashbo...
by bhimija New Member in Splunk Enterprise Security 09-24-2018
0 2
0
2
johnny_goya
Hi everyone, I'm trying to create a search that i can display the notable information. But i have a problema, when i...
by johnny_goya Explorer in Splunk Enterprise Security 09-22-2018
0 1
0
1
bcyates
We are attempting to bring data in from a CMDB to generate our Assets list for Splunk. We have established the conne...
by bcyates Communicator in Splunk Enterprise Security 09-21-2018
0 0
0
0
samyool36
I am attempting to run a search which matches specific domain names. In this search, I am using a lookup file to whit...
by samyool36 Explorer in Splunk Enterprise Security 09-21-2018
0 1
0
1
SunilMaharishi
i have one csv file which contains device name location data , i need to get count of all the device name location wi...
by SunilMaharishi Path Finder in Splunk Enterprise Security 09-20-2018
0 3
0
3
krhines410
I am trying to be an admin for a separate work project. But our original admin has been out of town for a few weeks, ...
by krhines410 New Member in Splunk Enterprise Security 09-19-2018
0 12
0
12
psmaan
I have set up an alert using a "Saved search" in Splunk Enterprise Security. I am throttling alerts for an hour when ...
by psmaan New Member in Splunk Enterprise Security 09-19-2018
0 2
0
2
pablo_splunk_es
Why can't the Splunk AWS Add-On consume Guardduty events using Kinesis like it does for VPC Flow Logs without the nee...
by pablo_splunk_es New Member in Splunk Enterprise Security 09-18-2018
0 0
0
0
AbubakarShahid
Hello all, I am working in Splunk ES and i would like to add the capability of getting a match on my URL list. I ...
by AbubakarShahid New Member in Splunk Enterprise Security 09-18-2018
0 0
0
0
gmchenry
I am running Splunk ES v4.7.2 and upgraded it, along with the rest of my servers to Splunk Enterprise v7.1.2. After ...
by gmchenry Explorer in Splunk Enterprise Security 09-18-2018
0 1
0
1
stanleyleung
Palo Alto Networks Add-on 6.0.2 - fail to download threat intelligence from AutoFocus' MineMeld in Splunk Enterprise ...
by stanleyleung New Member in Splunk Enterprise Security 09-17-2018
0 0
0
0
sylim_splunk
Below is the report from Qualys, please help me work it around. X-XSS-Protection HTTP Header missing on port 8089. G...
by sylim_splunk Splunk Employee Splunk Employee in Splunk Enterprise Security 09-17-2018
1 2
1
2
Crashfry
I'm running into an issue with Enterprise Security (ES) - correlation with event types with Add-ons. The example I ...
by Crashfry Path Finder in Splunk Enterprise Security 09-17-2018
0 1
0
1
snigdhasaxena
I want to check the severity of notable events so that I can hardcode the value of urgency without using lookups. Is ...
by snigdhasaxena Communicator in Splunk Enterprise Security 09-17-2018
0 4
0
4
pkievisas
Users report us suspicious emails for threat analysis. My idea is to import these emails into Splunk ES and automate ...
by pkievisas New Member in Splunk Enterprise Security 09-15-2018
0 0
0
0
ekost
Running ES 5.1 on Splunk 7.1. The asset lookups have been working fine. This morning the SRC and dest fields display ...
by ekost Splunk Employee Splunk Employee in Splunk Enterprise Security 09-14-2018
0 1
0
1
Lowell
I'm trying to make ldapfilter augment my results. I have a DN that I'm trying to resolve to an account name (sAMAcco...
by Lowell Super Champion in Splunk Enterprise Security 09-14-2018
0 3
0
3
markerton
I'm trying to run a simple search that shows only specific results and excludes the rest. The results are coming fr...
by markerton New Member in Splunk Enterprise Security 09-13-2018
0 1
0
1
Get Updates on the Splunk Community!

Why Splunk Customers Should Attend Cisco Live 2026 Las Vegas

Why Splunk Customers Should Attend Cisco Live 2026 Las Vegas     Cisco Live 2026 is almost here, and this ...

What Is the Name of the USB Key Inserted by Bob Smith? (BOTS Hint, Not the Answer)

Hello Splunkers,   So you searched, “what is the name of the usb key inserted by bob smith?”  Not gonna lie… ...

Automating Threat Operations and Threat Hunting with Recorded Future

    Automating Threat Operations and Threat Hunting with Recorded Future June 29, 2026 | Register   Is your ...
Top Solution Authors