Splunk Enterprise Security

Community Activity

Splunk version and new feature. Can someone tell what was the latest version available in January 2018. And What are the new features comes after Jan... by vikcee Path Finder in Splunk Enterprise Security 10-30-2019 1 1	1	1
Splunk Enterprise Security: How to ingest firewall ,waf ,ssandbox ,email gateway, endpoints logs to datamodels How can I ingest firewall ,waf ,ssandbox ,email gateway, endpoints logs to Splunk ES datamodels? I am trying to work... by RK_sp1unk New Member in Splunk Enterprise Security 10-29-2019 0 13	0	13
How to use multiple risk object fields on ES Risk Analysis response action? When creating or editing a correlation search in Enterprise Security, Is there any way to use multiple fields on the ... by alonsocaio Contributor in Splunk Enterprise Security 10-29-2019 0 2	0	2
What's the best practice to configure a windows system to collect data with the Splunk platform? Why do I need to configure the Windows event log audit policy and how do I make sure that I capture the correct event... by kdamak_splunk Splunk Employee in Splunk Enterprise Security 10-29-2019 0 1	0	1
splunk add-on installation on deployment server- commands/installation setups on linxes server CLI commands I need to install an updated app on the deployment server, please provide me the steps/commands to install the add-on... by kiranhar Explorer in Splunk Enterprise Security 10-28-2019 0 6	0	6
How Can I adjust Splunk Enterprise security ? Greetings!!! I am new user of splunk , and I would like to ask about splunk enterprise security, if there's any way ... by pacifikn Communicator in Splunk Enterprise Security 10-28-2019 0 3	0	3
COMPLEX migration and architecture. Please help validate. Current State : We have below Splunk instances running 6.5.2 version 1 x Splunk ES1 x Indexer (Physical SBOX which ... by damode Motivator in Splunk Enterprise Security 10-27-2019 0 1	0	1
using lookup values as input to variable Splunk search query : index="something" \| search hostname=variable using lookup file, map the variable value Plea... by vishaltv Path Finder in Splunk Enterprise Security 10-25-2019 0 2	0	2
Help needed capturing a regex and then grouping on it I have unstructured data that can vary, and I want to find results that match exactly 32 lowercase a-z characters, an... by mikeclemson New Member in Splunk Enterprise Security 10-25-2019 0 3	0	3
No SSL certificate validation can be performed since no CA file has been provided Splunk version 6.5.2 Getting the below error on Splunk SH with ES, 2019-10-25T00:45:02.649Z W CONTROL No SSL cert... by damode Motivator in Splunk Enterprise Security 10-25-2019 0 1	0	1
Field Extractor Hello, The field extractor stops at line 20. If what I am looking for is on a line after that what can I do to pull ... by Hegemon76 Communicator in Splunk Enterprise Security 10-25-2019 0 3	0	3
Splunk itsi and splunk enterprise security on same indexer cluster Hello Experts, Checking if we can plan and implement splunk itsi (on a separate sh cluster) and splunk es(on a separ... by bishtk Communicator in Splunk Enterprise Security 10-25-2019 0 6	0	6
Splunk Enterprise Security adding new View and navigation Hi All, I need to understand, we need to add new view and navigation tab to the Enterpirse Security app. But i need ... by sumitkathpal Explorer in Splunk Enterprise Security 10-25-2019 0 1	0	1
Where can I check Splunk Search Head compatibility with Indexers ? I have Splunk Search Head version 6.5.2 with ES 4.5.2. I am planning to install Indexers of 7.3.x version. My plan is... by damode Motivator in Splunk Enterprise Security 10-24-2019 0 2	0	2
Use cases in Enterprise Secuirty How to fetch and where to find what and all are the use cases which we have created till date in Enterprise Security ... by anandhalagarasa Path Finder in Splunk Enterprise Security 10-23-2019 0 1	0	1
Cloning information and forwarding to another splunk indexer from a splunk indexer Issue: I am attempting to get a specific index from an internal splunk setup to an external one without clustering.... by troyfred Explorer in Splunk Enterprise Security 10-23-2019 0 0	0	0
How to generate a report based on utilisation of AWS services covering cost & capacity management in Splunk? Hi I would like some query's or a query combined into one which gives me information about the following point's •... by gammah786 New Member in Splunk Enterprise Security 10-23-2019 0 0	0	0
Splunk Component Reboot/Restart Detected Hi, Is there a way to notify if any splunk components were restarted. For Example-Deployment servers, Search heads e... by sunitm New Member in Splunk Enterprise Security 10-23-2019 0 2	0	2
field extraction Same sourcetype have two different patterns in that case how can I define field extractions? Because field extraction... by N92 Path Finder in Splunk Enterprise Security 10-21-2019 0 4	0	4
How I can extract two diferent events in a single search Im new in this and I need some help with this for example I need to correlate two events from linux. my first searc... by cservin81 Engager in Splunk Enterprise Security 10-20-2019 1 2	1	2
Discarding Specific type of traffic either on forwarder or indexer fails Discarding Specific type of traffic either on forwarder or indexer fails, I tried to discard it using blacklist on fo... by abwe Loves-to-Learn Lots in Splunk Enterprise Security 10-20-2019 0 2	0	2
Versions above 7.1 for UFMA? The Splunkbase page says, "Splunk Versions: 7.1, 7.0, 6.6, 6.5" are supported. Perhaps this is futile, then (if so, ... by sectrainingjk Explorer in Splunk Enterprise Security 10-19-2019 0 3	0	3
Enterprise Search: What are the Recommended Fields? The SA-cim-validator displays the recommended fields while the official documentation at Common Information Model Add... by danielbb Motivator in Splunk Enterprise Security 10-18-2019 0 11	0	11
How to group similar events into one event Hi, We have pulled logs from our Anti Virus software into splunk and are in process of trying to filter through what... by callumring New Member in Splunk Enterprise Security 10-18-2019 0 3	0	3
Sonicwall data Enterprise Security Hi, I integrated my firewall sonicwall using the guide for Dell Sonicwall Analytics and this applications is working... by paola92 Explorer in Splunk Enterprise Security 10-17-2019 0 0	0	0