...rogram, typically toaccess shared resources/features provided by the module (ex: Sysmon EID 7) ## After triggering a `Force Update` of Security Content - First 5 Id Name Data...
Hi,
Is there a way or any direct link form where i can download all the sessions of Splunk 2016 which is available at the below link?
https://conf.splunk.com/sessions/2016-sessions.html
I k...
...uposidly secure index
[role_user]
srchIndexesAllowed = index1
Our platform team is not necesserily allowed to see the data in the indexes we have, but they need to be able to administer Splunk...
...arry over to enterprise security. On the Security Posture dashboard, the user I want to limit access of datato can see everything. This is because there are no restrictions in place on the "e...
Has anyone had luck defining Anomali Limo as a TAXII feed in Splunk Enterprise Security (ES)?
Our internal STAXX app can connect to Anomali Limo as guest/guest and access multiple feeds. We r...
Hi,
I am using OMS add-on. I have one index with one host,source and source type.
Now I want to limit accessto specific table like below:-
1. index=idx table=security-----------User1
2. i...
Hi all,
I'm trying for the very first time to parse XML with Splunk.
My file is a Qualys report. Typically, however, I can' t use the Qualys Splunk app as I receive only the XML report file....
Hello;
I am encountering issues with the Blue Coat app. It's not my first time deploying this app, and am considering instead just using this app, or apps; there seem to be many. https://splunk...
Hello. I'm new toSplunk. This may become obvious with my next question: I would like to restrict accessto certain hosts or fields on a per-user basis. IE. I might want our Help Desk to not be a...