Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- About shangshin
shangshin
Contributor
Member since:
04-20-2012
02-14-2022
Community Statistics
| Posts | 179 |
| Solutions | 0 |
| Karma Given | 45 |
| Karma Received | 27 |
| Member Since | 04-20-2012 |
Activity Feed
- Posted Re: SAML SSO on Splunkv8.2.4 on Security. 02-14-2022 10:43 AM
- Posted SAML SSO on Splunkv8.2.4 on Security. 02-10-2022 10:46 AM
- Posted Re: Role: Limit access to one host of one index on Security. 02-04-2021 06:14 AM
- Karma Re: Is there a REST API to get info in Splunk Web Access Controls » Authentication method » LDAP strategies » LDAP Groups ? for fdi01. 06-05-2020 12:47 AM
- Karma Re: Cluster info from master using REST API for dxu_splunk. 06-05-2020 12:47 AM
- Karma Re: DBQUERY correlation -- How to join results from DB for somesoni2. 06-05-2020 12:47 AM
- Karma Re: How to get LDAP group name by using query or REST API? for MuS. 06-05-2020 12:47 AM
- Karma Re: Is there a way to access the Splunk Web UI using curl? for somesoni2. 06-05-2020 12:47 AM
- Karma Re: Add-on Debug Refresh: Is there a command to only refresh a certain endpoint? for MuS. 06-05-2020 12:47 AM
- Karma Re: Report v.s. Alert, what's the difference? for jrodman. 06-05-2020 12:47 AM
- Karma Re: How to configure props.conf to filter out events with CTRL-M (^M)? for jeremiahc4. 06-05-2020 12:47 AM
- Karma Re: How to configure props.conf to filter out events with CTRL-M (^M)? for jrodman. 06-05-2020 12:47 AM
- Karma Re: Is it possible to have multiple alert conditions for one saved search? for martin_mueller. 06-05-2020 12:47 AM
- Got Karma for Cluster info from master using REST API. 06-05-2020 12:47 AM
- Got Karma for DBQUERY correlation -- How to join results from DB. 06-05-2020 12:47 AM
- Got Karma for Splunk query discrepancy. 06-05-2020 12:47 AM
- Got Karma for Report v.s. Alert, what's the difference?. 06-05-2020 12:47 AM
- Got Karma for Report v.s. Alert, what's the difference?. 06-05-2020 12:47 AM
- Got Karma for Report v.s. Alert, what's the difference?. 06-05-2020 12:47 AM
- Got Karma for Report v.s. Alert, what's the difference?. 06-05-2020 12:47 AM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 4 | |||
| 1 |
02-14-2022
10:43 AM
We got the saml sso working on v8.1.1 and when we migrated to v8.2.4 it works fine. However, on the fresh install of v8.2.4 we are getting the same error. I tried rrestarting by eplacing the sslpassword with cleartext, It is not fixing the issue. Still the same errot
... View more
02-10-2022
10:46 AM
Hello, Any changes happened on SAML SSO configuration in the new Splunk v8.2.4 ? We have an IdP configured to use SSO and it is working in the Splunk v8.1.1. We recently upgraded to v8.2.4 we copied the same authentication.conf from v8.1.1. Seeing the below error in the Splunkd.log relaystate is empty RelayState may be missing due to IDP-intiated SAML workflow. User=<user>@<DOMAIN1.DOMAIN.COM> domain= does not match default domain. Contact your syste administrator for more information about the default domain=saml for this system Any idea how to fix this error?
... View more
Labels
- Labels:
-
SAML
05-01-2015
06:22 AM
Hi,
Assuming I have 4 search heads (A, B, C, D) on a cluster env. Is it possible to schedule a saved search to run a designated search head? Another to put this -- how can I make the scheduled saved search to run on search head C all the time?
Thanks in advance!
... View more
04-30-2015
01:42 PM
Thanks for the direction!
... View more
04-30-2015
01:37 PM
I found it with the help of your clue. Thank you!
... View more
04-30-2015
12:10 PM
Thanks for the direction.
The REST API shows all the referenced AD group names. Is it possible to see the splunk role(s) mapping to each these AD groups?
... View more
04-29-2015
06:11 AM
Hi,
Is there a REST API to get info in Splunk Web Access controls » Authentication method » LDAP strategies » LDAP Groups ?
I noticed when Splunk is unable to connect to LDAP server, all the mappings between LDAP groups and roles will disappear. Therefore, I would like to check this proactively.
Thanks in advance!
... View more
04-17-2015
08:43 AM
Thanks a lot for the info.
I tried both options and got HTTP Status: 200
However, after executing the command, I didn't see the change reflected on the Email Settings of Splunk web UI below.
http://splunkserver:8000/en-US/manager/launcher/admin/alert_actions/email?action=edit
Maybe I should try different REST path? Can you direct me where to get a list of all REST paths?
... View more
04-16-2015
12:26 PM
I want to refresh this configuration /debug/refresh?entity=admin/alert_actions
Please advise if you know I can achieve the same goal using management port. Thank you!
... View more
04-16-2015
12:25 PM
I want to refresh this configuration /debug/refresh?entity=admin/alert_actions
There is an app called add-on debug refresh but the refresh command takes more than 2-3 minutes to complete. On the other hand, the url completes within 5-10 seconds.
... View more
04-16-2015
06:45 AM
Hi,
Is there a way to access Splunk Web UI by using curl? I am able to access it by using the management port 8089, but still need to access the UI via web port 8000
I got the error message below when using using curl:
curl -sku admin:changeme http://mysplunkserver:8000/
This resource can be found at <a href='http://mysplunkserver:8000/en-US/'>http://mysplunkserver:8000/en-US/</a>.507
... View more
- Tags:
- curl
- splunk-web
- ui
04-15-2015
11:53 AM
Thanks for the reply.
I was using url to reload some config e.g. /debug/refresh?entity=admin/alert_actions
However, I wasn't able to find a way to do this programatically so I started to use this app.
Do you happen to know a way to invoke the URI programatically or using CLI command? Thank you!
... View more
04-15-2015
08:28 AM
Hi,
The Add-on Debug Refresh is very useful, however, the refresh command takes a long time to finish. If I only need to refresh 1 endpoint only, is there a command to reload partially?
e.g. | refresh /servicesNS/admin/search/admin/alert_actions/_reload ?
Thanks in advance!
... View more
01-16-2015
10:52 AM
Thank you for pinpointing the information. I will need to first find out the key of the entry attribute -- emailAttribute in our firm's AD directory.
... View more
01-15-2015
01:54 PM
I can confirm user's email address is available in AD directory. However, when I examine the user's attributes under Manager>>Access controls>>Users>>juser, Email address is blank (and uneditable). The user is also unable to edit their own email preferences.
Basically, I am seeking a way to manually insert user's email address in some config file under $Splunk_Home/ directory.
... View more
01-15-2015
10:41 AM
I read the online doc -- Configure CSV and external lookups
However, I still don't find how the csv file will map e.g. user ID rich with the email address.
Assuming the user, rich, runs an interactive search from GUI and sends the job to background. How will he receives an email to richm@myemailaddress.com when the job is completed?
... View more
01-15-2015
10:36 AM
Is this the link you mention -- http://docs.splunk.com/Documentation/Splunk/6.2.1/Knowledge/Addfieldsfromexternaldatasources
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
02-14-2022
08:06 PM
|
