Splunk Enterprise Security

Splunk Enterprise Security
Community Activity
shashank1990
I already have Splunk 6.2.6 on our infrastructure and have most of the logs already indexed. So does the pricing mod...
by shashank1990 New Member in Splunk Enterprise Security 10-13-2015
0 1
0
1
praveen_kamble
Dear Team, We are planning to use splunk for monitoring (security) purpose as an SIEM service. What i wanted to ask ...
by praveen_kamble New Member in Splunk Enterprise Security 10-10-2015
0 2
0
2
gwalford
I am running some Nessus scanners - these systems have not yet been integrated with Splunk. Splunk's Enterprise Secu...
by gwalford Path Finder in Splunk Enterprise Security 10-07-2015
0 2
0
2
woodcock
According to section "Resolve Active Directory objects in event log files" in all versions of this document: http://...
by Esteemed Legend in Splunk Enterprise Security 10-01-2015
1 4
1
4
aweitzman
I'm trying to get some data to show up in the Enterprise Security 3.3 app on Splunk 6.2.3 on Windows, and it seems li...
by aweitzman Motivator in Splunk Enterprise Security 09-25-2015
0 2
0
2
pjb2160
Hello, I am wondering what the general thoughts of the Splunk community are in terms of which apps would you most re...
by pjb2160 Path Finder in Splunk Enterprise Security 09-21-2015
0 6
0
6
joshuamcqueen
Hey Splunkers, I'm getting an error in _internal that I can't seem to figure out. Every enabled app that has a csv ...
by joshuamcqueen Path Finder in Splunk Enterprise Security 09-20-2015
3 7
3
7
mikaelbje
Hi, The documentation for TA-Suricata states that it is CIM 4.2 compliant, but I am only seeing events from Suricata...
by mikaelbje Motivator in Splunk Enterprise Security 09-18-2015
1 3
1
3
btran
I have a non-admin user "testuser" added to a non-admin "testrole" I give testrole capabilities of edit_identitylooku...
by btran Explorer in Splunk Enterprise Security 09-15-2015
0 1
0
1
phoenixdigital
So it appears that the built-in tagging and field enrichment for the Splunk App for Enterprise Security is poorly con...
by phoenixdigital Builder in Splunk Enterprise Security 09-10-2015
1 2
1
2
DmitryTchersak
The dns datamodel is not populating because out of the box neither ES or the Windows Infrastructure app have the tag ...
by DmitryTchersak New Member in Splunk Enterprise Security 09-08-2015
0 2
0
2
Maheshparsi
Hi All, I need to know the features that are not available in the Splunk App for Enterprise Security that are availa...
by Maheshparsi Explorer in Splunk Enterprise Security 09-08-2015
0 2
0
2
jeff
Enterprise Security 3.3.1, Splunk 6.2.4. I have notable events being generated by correlation searches (for instance...
by jeff Contributor in Splunk Enterprise Security 09-04-2015
0 1
0
1
john_miller1
We were testing two externally hosted threat feeds. After adding them to the Splunk App for Enterprise Security usin...
by john_miller1 Explorer in Splunk Enterprise Security 09-03-2015
1 2
1
2
splunk2015P
Hello, I would like to know what are the steps to install and deploy Splunk & the Splunk App for Enterprise Security...
by splunk2015P New Member in Splunk Enterprise Security 09-03-2015
0 1
0
1
infosecdb
Hi Everyone, I am trying to concoct a regular expression in the Splunk App for Enterprise Security to find all SCCM ...
by infosecdb Engager in Splunk Enterprise Security 09-01-2015
0 1
0
1
may_aaron
I want to create a single value chart to illustrate total intrusion detection events, however, I want to limit the re...
by may_aaron Engager in Splunk Enterprise Security 08-31-2015
0 1
0
1
chris
The Splunk App for Enterprise Security ships with extreme search commands. I would like to see drastic changes in occ...
by chris Motivator in Splunk Enterprise Security 08-26-2015
0 3
0
3
mbarrie_splunk
In the Splunk App for Enterprise Security on Splunk Cloud, there is a frequent message that the systems don't meet th...
by mbarrie_splunk Splunk Employee Splunk Employee in Splunk Enterprise Security 08-25-2015
1 1
1
1
MHibbin
Hi, I've hit a bit of a road block trying to set up some custom correlation searches, which are very similar to othe...
by MHibbin Influencer in Splunk Enterprise Security 08-22-2015
0 5
0
5
may_aaron
I would like to restrict the tstats search below to a specific index. The search uses the IDS_Attacks datamodel in ES...
by may_aaron Engager in Splunk Enterprise Security 08-21-2015
0 1
0
1
geosujith
What is the procedure to load the data into the Splunk App for Enterprise Security?
by geosujith New Member in Splunk Enterprise Security 08-20-2015
0 2
0
2
rturk
Hi Splunkers & Splunkettes, So when attempting to remove a configured user via a REST API call, I don't seem to be a...
by rturk Builder in Splunk Enterprise Security 08-11-2015
0 1
0
1
brent_weaver
We are installing Splunk on CentOS Linux in the next week or so. Our service accounts are going to be on an LDAP serv...
by brent_weaver Builder in Splunk Enterprise Security 08-10-2015
0 3
0
3
brent_weaver
Hello! I am about to embark on an install of the Splunk App for Enterprise Security on a set of shiny new CentOS Li...
by brent_weaver Builder in Splunk Enterprise Security 08-07-2015
0 2
0
2
Get Updates on the Splunk Community!

Announcing Modern Navigation: A New Era of Splunk User Experience

We are excited to introduce the Modern Navigation feature in the Splunk Platform, available to both cloud and ...

Modernize your Splunk Apps – Introducing Python 3.13 in Splunk

We are excited to announce that the upcoming releases of Splunk Enterprise 10.2.x and Splunk Cloud Platform ...

Step into “Hunt the Insider: An Splunk ES Premier Mystery” to catch a cybercriminal ...

After a whole week of being on call, you fell asleep on your keyboard, and you hit a sequence of buttons that ...
Top Solution Authors