Splunk Enterprise Security

Splunk Enterprise Security
Community Activity
tfrederick74656
I'm trying to follow the "Customize the Menu Bar" steps in https://docs.splunk.com/Documentation/ES/5.0.0/Admin/Custo...
by tfrederick74656 Explorer in Splunk Enterprise Security 05-04-2018
0 3
0
3
koshyk
I was looking into upgrade of ES from 4.1.x version to 4.7.x version. (alongside Splunk). I can see ES changed dramat...
by koshyk Super Champion in Splunk Enterprise Security 05-04-2018
0 6
0
6
heyyyyy
1
5
cafissimo
Hello, I am installing Splunk PCI app 3.5.0 on an environment that is made of a Search Head and two indexers (not clu...
by cafissimo Communicator in Splunk Enterprise Security 05-02-2018
0 1
0
1
N92
I have seen documents for this. As per document path should be below. Select Configure > Content Management. Click C...
by N92 Path Finder in Splunk Enterprise Security 05-01-2018
0 2
0
2
nitishk1
Hello, I am trying to send notable events to third party API. Can I use webhook to POST notable event details on thi...
by nitishk1 New Member in Splunk Enterprise Security 05-01-2018
0 2
0
2
MHibbin
Hi, We have a requirement to add some additional fields to events under "Incident Review" for IOCs (I have looked at...
by MHibbin Influencer in Splunk Enterprise Security 04-30-2018
1 9
1
9
daniel333
All, I though it would be nice for PCI guy to search the top right by PCI DSS req, say like "10.1" its working for ...
by daniel333 Builder in Splunk Enterprise Security 04-26-2018
1 1
1
1
kiranhar
We deploying Splunk enterprise security ( SIEM) solution) and it is in the final implementation stage. does anyone ha...
by kiranhar Explorer in Splunk Enterprise Security 04-26-2018
0 1
0
1
V4M51
difference between firewall log management and Splunk Security Log management as a SIEM
by V4M51 Engager in Splunk Enterprise Security 04-25-2018
0 6
0
6
atulod1
Hi I would like to ask for help regarding how to match the first dropdown list to the 2nd dropdown list. Here the ...
by atulod1 New Member in Splunk Enterprise Security 04-25-2018
0 0
0
0
dhodzic
Has anyone had luck defining Anomali Limo as a TAXII feed in Splunk Enterprise Security (ES)? Our internal STAXX app...
by dhodzic New Member in Splunk Enterprise Security 04-24-2018
0 0
0
0
N92
Can I add comment field as table attribute in incident review page. For that what would be field name so I can map it...
by N92 Path Finder in Splunk Enterprise Security 04-24-2018
0 3
0
3
Miquell
Hi all, I want to add rows to a column for which values have no direct relationship with any data (a forced join) e...
by Miquell New Member in Splunk Enterprise Security 04-24-2018
0 1
0
1
matthiascarlier
I am new to Splunk (Enterprise Security) and I am stuck on making a certain correlation search. An example of the ev...
by matthiascarlier Engager in Splunk Enterprise Security 04-24-2018
0 4
0
4
mohammadsharukh
Hi All, I am working on Arcsight and i am seeing there are use cases available on Splunk for both the Proof point an...
by mohammadsharukh Path Finder in Splunk Enterprise Security 04-24-2018
1 3
1
3
proylea
Looking over the clients configuration for adding a lookup based source for Enterprise Security Threat Intelligence, ...
by proylea Contributor in Splunk Enterprise Security 04-23-2018
0 5
0
5
wwajohi
I would like to import oracle logs to Splunk to monitor DBA activities. How do I go about this? Any documentation wit...
by wwajohi New Member in Splunk Enterprise Security 04-20-2018
0 1
0
1
pfabrizi
I am reading the upgrade instructions for ES 5.0. It indicates to take a full backup of the search head. Is that just...
by pfabrizi Path Finder in Splunk Enterprise Security 04-20-2018
1 3
1
3
splunkIT
I recently upgraded the Splunk Palo Alto Add-on from 3.8.0 to 6.0.2 on our ES search head. Since that change, the ca...
by splunkIT Splunk Employee Splunk Employee in Splunk Enterprise Security 04-19-2018
1 1
1
1
saurabh_tek11
i have installed ES 4.7 and it took long time to get installed (left it running last evening and this morning ES was ...
by saurabh_tek11 Communicator in Splunk Enterprise Security 04-19-2018
0 3
0
3
travislange
I'm trying to configure Splunk Enterprise Security but I'm having some issues getting the Incident Review to show any...
by travislange New Member in Splunk Enterprise Security 04-19-2018
0 2
0
2
daniel333
All, Does anyone have a walk through on setting up the time center on Splunk ES for Linux (centOS 7 in this case) h...
by daniel333 Builder in Splunk Enterprise Security 04-18-2018
0 0
0
0
muralimadhavan
Splunk Enterprise Security Incident status in incident review tab, has anyone used it in correspondence to IR (Incide...
by muralimadhavan Explorer in Splunk Enterprise Security 04-18-2018
0 0
0
0
kalaiarasu
IBM Security Network Protection XGS 5100 (IPS) required to be integrated with Splunk and wanted to ensure it's follow...
by kalaiarasu Explorer in Splunk Enterprise Security 04-17-2018
0 0
0
0
Get Updates on the Splunk Community!

SOC4Kafka - New Kafka Connector Powered by OpenTelemetry

The new SOC4Kafka connector, built on OpenTelemetry, enables the collection of Kafka messages and forwards ...

Event Series: Level up your SOC: Advancing with Splunk Enterprise Security

AI has fundamentally raised the stakes for security operations, and this three-part series is your guide to ...

Announcing Modern Navigation: A New Era of Splunk User Experience

We are excited to introduce the Modern Navigation feature in the Splunk Platform, available to both cloud and ...