Splunk Enterprise Security

Community Activity

Does Splunk ESS include correlation rules for malware activities? Does Splunk ESS include, out of the box - functionalities that do not require any additional installation, correlatio... by Max Engager in Splunk Enterprise Security 05-31-2011 0 1	0	1
ESS SEP, Check Point and TippingPoint TA Filters Hi, We're using the above and I was wondering if it is possible to filter out some unneeded event data to decrease i... by ephemeric Contributor in Splunk Enterprise Security 03-31-2011 0 1	0	1
splunk entreprise security suite how to download,install and configure splunk entreprise security suite app by bwenge Explorer in Splunk Enterprise Security 03-02-2011 0 1	0	1
Why do external ESS links fail in IE? When I try to navigate to an external link (iframe) such as Virus Bulletin in ESS using Internet Explorer, I get the ... by hazekamp Builder in Splunk Enterprise Security 02-15-2011 2 2	2	2
In ESS's Incident Review dashboard why do my checkbox selections dissapear? I noticed some weirdness with the Incident Review check-boxes. Sometimes I will have 1 or more check-boxes selected,... by hazekamp Builder in Splunk Enterprise Security 02-14-2011 2 1	2	1
In ESS why does clicking on a "View Full Results" link show 0 events? On various dashboard panels I see "View Full Results" links. Certain links result in 0 search results. How could th... by hazekamp Builder in Splunk Enterprise Security 02-14-2011 1 1	1	1
Why do results differ between ESS Security Posture and Incident Review dashboards? Sometimes when I drill down on information displayed in the Security Posture dashboard there is a different number of... by hazekamp Builder in Splunk Enterprise Security 02-14-2011 3 1	3	1
How do I suppress possible typo in web.conf for ESS on 4.2 When I start my Splunk server I see Possible typo in stanza [settings] in $SPLUNK_HOME/etc/apps/SplunkEnterpriseSec... by hazekamp Builder in Splunk Enterprise Security 01-25-2011 1 1	1	1
How do I configure ESS to report on Splunk authentication messages I noticed that "splunk" authentication does not show up in the Access Center or the Access Search views. What gives? by hazekamp Builder in Splunk Enterprise Security 01-25-2011 1 1	1	1
Enterprise apps Is the enterprise apps (ess,pci) included in the cost for enterprise, or do you have to buy them additionaly? by fisk12 Path Finder in Splunk Enterprise Security 01-17-2011 0 3	0	3
Add a comment field to an event A user would like to click on the down arrow to the left of an event and leave a comment. I think I have seen this de... by nate015 Explorer in Splunk Enterprise Security 08-30-2010 1 4	1	4
Does Splunk ESS include coverage for FISMA compliancy? Does Splunk ESS include coverage for FISMA compliancy? And if so, what specifically within the ESS suite is specific ... by maverick Splunk Employee in Splunk Enterprise Security 03-31-2010 1 4	1	4