I have just configured Splunk and I have alert running for locked account. It keep generating multiple entries from per lockout account So I want to generate one message incase of account g...
Hi Splunk Community, I'm trying to list all splunk local users (authentication system = splunk) . The below search lists all users SAML and Splunk but I'm only looking for local accounts. | r...
My company just recently bought a license for SplunkLight. However, I don't see any option on the public website to download SplunkLight. Only Enterprise and Free (which is a dumbed down version o...
We currently use SplunkLight Free as our data volume is tiny; we're not yet sure aboutSplunk, so it's not on our production system.
The 'Perpetual' free licence expired after a year; I've r...
I have Tableau Server installed on my local machine.
Yesterday I downloaded and installed Splunklight to the same machine.
When trying to launch Splunk Web interface - it opens Tableau Server l...
...onfigurations \ Reassign Knowledge Objects \ Orphaned
we have the option of reassigning these searches to other Domain Accounts belonging to regular Splunk non admin users, or to the built in d...
...erver_port>' This install a SplunkForwarder service that runs with the user NT SERVICES/SplunkForwarder. Reading the documentation, this account is a virtual account which are managed local accounts....
I've read through Ryan Lait's blogs "Splunking Microsoft Cloud Data" and it answers everything but what permissions does the account need on the Azure side. I keep finding this error in the MS A...