Splunk Enterprise Security

Splunk Enterprise Security
Community Activity
chidiuchegbu
I have setup Microsoft defender for endpoint inputs with many add on but It looks as though most of the add on are no...
by chidiuchegbu Loves-to-Learn Everything in Splunk Enterprise Security 03-08-2022
0 0
0
0
sshukla2505
Hi, So, I have got 2 instances of Cisco Firepower management centers. I need to connect these 2 FMCs to our eStreamer...
by sshukla2505 New Member in Splunk Enterprise Security 03-04-2022
0 9
0
9
ritesh5040
1.Which firewall port is used for SPLUNK integration with EPM SaaS?2.Any idea about the volume of events received in ...
by ritesh5040 Loves-to-Learn in Splunk Enterprise Security 03-03-2022
0 0
0
0
b_chris21
Hello everyone, I have a correlation search setup to detect Suricata IDS alerts of a specific severity and trigger a ...
by b_chris21 Communicator in Splunk Enterprise Security 03-03-2022
0 1
0
1
bapun18
I want to export the result of a Splunk dashboard and authentication would be via SSO/SAML. I can provide the usernam...
by bapun18 Communicator in Splunk Enterprise Security 03-01-2022
0 0
0
0
beano501
We have lots of firewalls (both internal and internet facing) feeding into our CIM Network_Traffic Model within Enter...
by beano501 Explorer in Splunk Enterprise Security 03-01-2022
0 2
0
2
sohailmohammed
Hi All, I have created a newly created field/field alias/field extraction with GLOBAL Permissions.Example | eval test...
by sohailmohammed Path Finder in Splunk Enterprise Security 03-01-2022
0 0
0
0
michaeltayo
I am trying to add Threat Intelligence to my Splunk ES via the HISAC taxii discovery service I have set up the Intell...
by michaeltayo Explorer in Splunk Enterprise Security 02-24-2022
1 1
1
1
zacksoft_wf
I have  this 'Email' Data Model in ES. The model is populated by macro and tags(2 eventypes populated by saved search...
by zacksoft_wf Contributor in Splunk Enterprise Security 02-23-2022
0 9
0
9
Stefanie
I've been investigating why I started to not receive  ES events for some time now. After upgrading ES, I had to reins...
by Stefanie Builder in Splunk Enterprise Security 02-22-2022
0 1
0
1
sahana
Hi, i have an requirement as like below. TimeStampLoginUsersAvg SLAMin SLA Max SLA20-02-2022 11:3035113.420-02-2022 1...
by sahana Engager in Splunk Enterprise Security 02-22-2022
0 2
0
2
human96
Could you please tell me about the following? If I want to limit memory usage for a search, is it correct to think th...
by human96 Communicator in Splunk Enterprise Security 02-17-2022
0 3
0
3
pizzor
Been getting messages saying that some identities are exceeding the field limits. I've increased the limit on some of...
by pizzor Path Finder in Splunk Enterprise Security 02-17-2022
0 4
0
4
Mukunda7
We have some firewall devices sending data to one index previously. Now I have to create new index for some of the de...
by Mukunda7 Explorer in Splunk Enterprise Security 02-16-2022
0 3
0
3
human96
is there a way to execute the following process of the OS? ??   -Cluster master server (Splunk Enterprise installed) ...
by human96 Communicator in Splunk Enterprise Security 02-15-2022
0 1
0
1
engmohdissam
Greetings! I need to know how I can find the most use cases trigger alerts in Splunk. is there any specific search qu...
by engmohdissam New Member in Splunk Enterprise Security 02-11-2022
0 1
0
1
deepdiver
How would I find sAMAccountName(s) - more than one. I have tried boolean operators and(&) or(|) to no avail. Currentl...
by deepdiver Loves-to-Learn Everything in Splunk Enterprise Security 02-10-2022
0 1
0
1
Stefanie
Hello everyone!I'm looking for assistance with fine-tuning Enterprise Security.I've been working hard with configurin...
by Stefanie Builder in Splunk Enterprise Security 02-10-2022
0 2
0
2
yawdeals
I need help on how I can tune the search below. It creates too much noise. I will like to know what steps I can use t...
by yawdeals New Member in Splunk Enterprise Security 02-09-2022
0 5
0
5
tmkunte
How do I find out which data model a particular app "maps" to? Specifically the Cisco security suite ... I see it is ...
by tmkunte Engager in Splunk Enterprise Security 02-08-2022
0 2
0
2
TheBravoSierra
Hi, I'm having an issue with my deployer and search head cluster while upgrading enterprise security. In step 8 of th...
by TheBravoSierra Path Finder in Splunk Enterprise Security 02-02-2022
0 0
0
0
joshuahuang1
I recently installed brand new Splunk 8.2.2, then installed Splunk ES 6.6.0 on it, after Splunk ES installed and conf...
by joshuahuang1 Engager in Splunk Enterprise Security 02-02-2022
0 1
0
1
securitypaul
Hello everyone. I'm looking for some assistance with a problem where I get differing search results from what should ...
by securitypaul Explorer in Splunk Enterprise Security 02-02-2022
0 3
0
3
NightShark
Hello,I would like to assign random new "unassigned" notables to a specific user.I wanted to accomplish this via a sa...
by NightShark Path Finder in Splunk Enterprise Security 02-01-2022
0 7
0
7
sohailmohammed
Hello there, I get different results when I run a rest call. For example I ran a rest command to bring all the dashbo...
by sohailmohammed Path Finder in Splunk Enterprise Security 01-31-2022
0 6
0
6
Get Updates on the Splunk Community!

Federated Search for Snowflake Is Now Generally Available on Splunk Cloud Platform

Splunk is excited to announce the General Availability (GA) of Federated Search for ...

Help Us Build Better Splunk Regex Puzzles (And Win Prizes!)

If you’ve spent any time in the Splunk Community Slack, you’ve likely seen our resident Splunk Trust ...

Fuel Your Journey: What’s Waiting for You at the .conf26 Acceleration Station

Navigating the show floor at .conf26 isn't just about keynotes and technical breakout sessions; it's also ...