Hi,
Purely for informational purposes, I would like to know where the file for accesscontrol is stored in Splunk Cloud.
Is it stored on the forwarder, indexer, or the search head? If I i...
...here demoted and new device promoted.
My Domain Controller GPOs for Advanced Audit Configuration, hasn't changed since we upgraded the DCs from 2008 R2 to 2012 R2.
Advanced Audit C...
Hi
Can we have configure users according to the monitors defined at the Universal Forwarder?
We are trying to have a splunk server which monitors mail server and weblogic logs. I am trying to c...
.../' from page requests."
Has anyone run across something similar? I'm assuming the service is needed for the Universal Forwarder, but not sure why only a few systems are reporting this v...
Hello. Please see the screenshot on this post, its from the Splunk Universal Forwarder (UF) installer steps. Are we supposed to check the box for “Add user as local administrator” when installing a U...
I want the ability to grant a user access to his forwarder inputs on the configure server, so that he can add Windows event Logs, Files & Directories, Windows Performance Monitoring, TCP, UDP, &a...
Hi,
As the question describes, I would like to know if there's a way to get the access logs from RedCloud Security appliance. All we have is a black box with a web interface to control that box....
...opic - Is it possible to control who can connect to my indexers at all? It seems like anyone can set up a forwarder and connect it to our (publicly known) indexer's hostname.
...estricted to only sending logs by either Universal Forwarder or Heavy Forwarder. We have seen the discouragement associated with the heavy forwarder, and we would like to get a few things cleared up. P...
Hello,
I have purchase Splunk Enterprise 1GB/day and I want to configure the forwarder on Domain Controller to send data about Security Events on Event Viewer. I want to index all access of d...