...rogram, typically toaccess shared resources/features provided by the module (ex: Sysmon EID 7) ## After triggering a `Force Update` of Security Content - First 5 Id Name Data...
Hi,
Is there a way or any direct link form where i can download all the sessions of Splunk 2016 which is available at the below link?
https://conf.splunk.com/sessions/2016-sessions.html
I k...
...uposidly secure index
[role_user]
srchIndexesAllowed = index1
Our platform team is not necesserily allowed to see the data in the indexes we have, but they need to be able to administer Splunk...
.../SAML_Docs/How-to-Configure-SAML-2.0-for-Splunk-Cloud.html When finished the setup, the logon page is through Okta but it got below error message after filled in user email and password in Okta l...
...arry over to enterprise security. On the Security Posture dashboard, the user I want to limit access of datato can see everything. This is because there are no restrictions in place on the "e...
...hat log files are most relevant for SUSE Linux when it comes tosecurity-focused use cases in Splunk ES (e.g., authentication, audit, change tracking, endpoint monitoring)? How do SUSE Linux log p...
Has anyone had luck defining Anomali Limo as a TAXII feed in Splunk Enterprise Security (ES)?
Our internal STAXX app can connect to Anomali Limo as guest/guest and access multiple feeds. We r...
Hello;
I am encountering issues with the Blue Coat app. It's not my first time deploying this app, and am considering instead just using this app, or apps; there seem to be many. https://splunk...
Hi,
I am using OMS add-on. I have one index with one host,source and source type.
Now I want to limit accessto specific table like below:-
1. index=idx table=security-----------User1
2. i...