Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- About yangban
yangban
Explorer
Member since:
11-26-2018
06-05-2020
Community Statistics
| Posts | 11 |
| Solutions | 0 |
| Karma Given | 2 |
| Karma Received | 1 |
| Member Since | 11-26-2018 |
Activity Feed
- Got Karma for Admin can't see users with a certain role and we can't take out the "grantableRoles = admin" option. 06-05-2020 12:50 AM
- Karma Splunk Add-on for Check Point OPSEC LEA not making TCP outbound Connections. for daveABF. 06-05-2020 12:49 AM
- Karma Re: Splunk Add-on for Check Point OPSEC LEA not making TCP outbound Connections. for anywhere99. 06-05-2020 12:49 AM
- Posted Re: What is the best and fastest way to transport .log files by syslog? on Getting Data In. 04-25-2019 07:55 AM
- Posted What is the best and fastest way to transport .log files by syslog? on Getting Data In. 04-25-2019 07:12 AM
- Tagged What is the best and fastest way to transport .log files by syslog? on Getting Data In. 04-25-2019 07:12 AM
- Tagged What is the best and fastest way to transport .log files by syslog? on Getting Data In. 04-25-2019 07:12 AM
- Tagged What is the best and fastest way to transport .log files by syslog? on Getting Data In. 04-25-2019 07:12 AM
- Tagged What is the best and fastest way to transport .log files by syslog? on Getting Data In. 04-25-2019 07:12 AM
- Posted Re: Splunk Add-on for Check Point OPSEC LEA not making TCP outbound Connections. on All Apps and Add-ons. 04-17-2019 11:45 PM
- Posted Re: Splunk Add-on for Check Point OPSEC LEA not making TCP outbound Connections. on All Apps and Add-ons. 04-16-2019 05:12 AM
- Posted Re: Admin can't see users with a certain role and we can't take out the "grantableRoles = admin" option on Security. 04-11-2019 03:35 PM
- Posted Re: Admin can't see users with a certain role and we can't take out the "grantableRoles = admin" option on Security. 04-11-2019 03:34 PM
- Posted Re: Admin can't see users with a certain role and we can't take out the "grantableRoles = admin" option on Security. 04-07-2019 07:47 PM
- Posted Admin can't see users with a certain role and we can't take out the "grantableRoles = admin" option on Security. 04-05-2019 02:01 AM
- Tagged Admin can't see users with a certain role and we can't take out the "grantableRoles = admin" option on Security. 04-05-2019 02:01 AM
- Tagged Admin can't see users with a certain role and we can't take out the "grantableRoles = admin" option on Security. 04-05-2019 02:01 AM
- Tagged Admin can't see users with a certain role and we can't take out the "grantableRoles = admin" option on Security. 04-05-2019 02:01 AM
- Tagged Admin can't see users with a certain role and we can't take out the "grantableRoles = admin" option on Security. 04-05-2019 02:01 AM
- Tagged Admin can't see users with a certain role and we can't take out the "grantableRoles = admin" option on Security. 04-05-2019 02:01 AM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 0 | |||
| 1 | |||
| 0 |
04-25-2019
07:55 AM
Thanks! I might try HEC!
... View more
04-25-2019
07:12 AM
Hi we are trying to transport several .log files to a Forwarder by syslog.
We used some bash scripts to do so, but it was just way too slow for us.(nearly 1MB/min)
Is there anyone know a faster way?
Thanks.
... View more
04-17-2019
11:45 PM
Fantastic! thanks! I was stuck here for days!
... View more
04-16-2019
05:12 AM
Having a exactly same issue here. Did you just put host stanza in your input?
... View more
04-11-2019
03:34 PM
Thank you for your kind reply. Though, i really hope maybe next patch or coming up version would cover this issue.
... View more
04-07-2019
07:47 PM
As i save admin role on web, the grantableRoles option comes back. And we don't use any config managing tools.
... View more
Hi, all the splunk gurus out there.
Recently we added a new role and we couldn't see the users with the role when logged in as admin.
So we took out "grantableRoles = admin" option on "/etc/sysyem/local/authorize.conf"
It seemed it should work but splunk just restore the option as we save admin role on the web.
What are we missing? please help us.
We have 3 SH with clustering and the version of splunk is 7.2.4.
Thanks!
... View more
02-07-2019
08:41 PM
It took me a whole day to figure out, but I took out the quotation mark and it worked. And must include "127.0.0.1". Thank you so much for your help @chrisyoungerjds
... View more
02-07-2019
01:59 PM
Thank you for your answer. But i already tried and got the same result.
... View more
02-07-2019
12:51 AM
Hi
Could you help me with "web.conf"?
I would like to accept or block users to access to web interface with IP address.
So I found "acceptFrom" option and applied to /system/local/web.conf
But when I tried to restart Splunk, I got this error: "WARNING: web interface does not seem to be available!"
splunkd log shows
02-07-2019 17:35:51.968 +0900 WARN HTTPServer - Refusing HTTP connection from 127.0.0.1 due to server ACL
02-07-2019 17:35:52.069 +0900 WARN HTTPServer - Refusing HTTP connection from 127.0.0.1 due to server ACL
02-07-2019 17:35:52.085 +0900 WARN HTTPServer - Refusing HTTP connection from "my local IP" due to server ACL
02-07-2019 17:35:52.093 +0900 WARN HTTPServer - Refusing HTTP connection from "my local IP" due to server ACL
And my web.conf settings are like this
[settings]
acceptFrom = "my local IP"
Thanks for reading this.
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
06-05-2020
02:04 AM
|
