Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- About eafitt
eafitt
Path Finder
Member since:
07-19-2012
06-05-2020
Community Statistics
| Posts | 17 |
| Solutions | 0 |
| Karma Given | 5 |
| Karma Received | 2 |
| Member Since | 07-19-2012 |
Activity Feed
- Karma Re: Quick question about AD app 'GroupType' does not exist [pic] for ahall_splunk. 06-05-2020 12:46 AM
- Karma Re: minimum free disk space reached fix without changing value for lguinn2. 06-05-2020 12:46 AM
- Karma Re: Splunk > from a security point of view for Ayn. 06-05-2020 12:46 AM
- Karma Re: Deleting Nessus app reports for jgedeon120. 06-05-2020 12:46 AM
- Karma Re: Question about the *Nix 4.5 app for dmaislin_splunk. 06-05-2020 12:46 AM
- Got Karma for auditd.conf. 06-05-2020 12:46 AM
- Got Karma for minimum free disk space reached fix without changing value. 06-05-2020 12:46 AM
- Posted auditd.conf on Deployment Architecture. 11-09-2012 10:43 AM
- Tagged auditd.conf on Deployment Architecture. 11-09-2012 10:43 AM
- Tagged auditd.conf on Deployment Architecture. 11-09-2012 10:43 AM
- Posted Re: Quick question about AD app 'GroupType' does not exist [pic] on Dashboards & Visualizations. 11-02-2012 05:46 AM
- Posted Re: Quick question about AD app 'GroupType' does not exist [pic] on Dashboards & Visualizations. 11-01-2012 07:57 AM
- Posted Re: Quick question about AD app 'GroupType' does not exist [pic] on Dashboards & Visualizations. 10-31-2012 08:39 AM
- Posted Quick question about AD app 'GroupType' does not exist [pic] on Dashboards & Visualizations. 10-31-2012 07:22 AM
- Tagged Quick question about AD app 'GroupType' does not exist [pic] on Dashboards & Visualizations. 10-31-2012 07:22 AM
- Posted Re: Deploying Splunk for Active Directory confusion on All Apps and Add-ons. 10-26-2012 08:19 AM
- Posted Deploying Splunk for Active Directory confusion on All Apps and Add-ons. 10-26-2012 07:30 AM
- Tagged Deploying Splunk for Active Directory confusion on All Apps and Add-ons. 10-26-2012 07:30 AM
- Tagged Deploying Splunk for Active Directory confusion on All Apps and Add-ons. 10-26-2012 07:30 AM
- Posted Re: Deleting Nessus app reports on Deployment Architecture. 10-16-2012 09:27 AM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 1 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 1 | |||
| 0 |
11-09-2012
10:43 AM
1 Karma
I want to send auditd.conf files to the splunk server so I can monitor when an account is created and deleted on one of my linux servers. Is this possible w/o a forwarder? I've tried to configure the auditd.conf file to point to the splunk server which did not work.
... View more
11-02-2012
05:46 AM
It is in the AD app, could it be something with the actual csv file?
http://www.freeimagehosting.net/s86fw
... View more
11-01-2012
07:57 AM
Actually this error is coming up in every app that I have not just the AD app which I got working.
... View more
10-31-2012
08:39 AM
Ok I'll go back through the install. Also would there happen to be a video or better reference to deploying splunk app for AD? I've been through all the documents on splunk base as well as the readme within the app multiple times and still can't get it to work.
... View more
10-31-2012
07:22 AM
Where is this error coming from? or is this problem within the AD app directory or something with my central splunk server?
http://www.freeimagehosting.net/oinp6
... View more
- Tags:
- charting
10-26-2012
08:19 AM
ok thank you
... View more
10-26-2012
07:30 AM
I'm trying to deploy Splunk for AD app on a central Splunk instance and the documentation on Splunk is a bit confusing to me. Can anyone tell me the exact steps to deploy this app I've looked through all of the documentation on Splunk, this is what I've done so far:
On the Splunk server:
1.) Configured the activedirectory.conf file in the default folder.
2.) Copied eventtypes.conf file to the local folder in the AD app
On the Universal Forwarder: (Windows Server 2003)
1.) Installed KB968930 (powershell and winRM)
2.) Changed the GPO to enable Powershell support
3.) Copied the TAs from the Splunk server into the SPLUNK_HOME%\etc\apps folder on the forwarder.
What else needs to be done? Reading the README.txt within the AD app folder and then reading the online documentation I see there is a HUGE difference...
... View more
10-15-2012
08:08 AM
I was wondering if it was possible to delete reports I've uploaded in the Nessus app? I have about 5 reports that have not generated any data, so I was wondering if it was possible to delete reports within the app? I don't want to end up with 100 reports at the end of the month.
... View more
- Tags:
- nessus
10-08-2012
07:54 AM
The search I'm running is: host="PIWMDPAD01" User_Name="the user" EventCodeDescription="Logon Failure - Unknown user name or bad password"
Yes, I have logs from the same time period, and I'm sure we are collecting logs from all of our DCs but I will have to double check this could very well be the problem. Thanks alot.
... View more
10-05-2012
06:54 AM
I am currently investigating an issue with one of out users, and I see in Splunk> this user has 500+ login failures. When I look at the logs within AD I see this same user having 17,000+ login failures. I am clueless as to why there is a huge difference between the two numbers. I do not have the AD app installed in Splunk> could this be the reason?
... View more
09-12-2012
06:43 AM
Hello,
Fresh out of college with a Cyber Security degree, I'm relatively new to the field. We recently purchased a Splunk> license and got a good amount of data going into the Splunk> server. My question is from a security point of view, what should I be looking for? Any tips for a newbie?
... View more
- Tags:
- security
08-17-2012
08:19 AM
thank you for your help
... View more
08-16-2012
11:06 AM
1 Karma
I have the warning "The minimum free disk space reached for C:\Program files\splunk\var\run\splunk\dispatch" I did some research on splunk about how to fix this warning, but I didn't see a resolution without changing the value in system settings. Is there away to delete older logs? Or something in C:\Program files\splunk\var\run\splunk\dispatch I can delete?
We have an enterprise trial license and still testing Splunk but this is hard to do with this warning.
... View more
- Tags:
- disk-space
07-25-2012
07:33 AM
I'm a little bit confused about how to get data from the linux servers to the *Nix app. Can I just add the servers from the home menu (Add data)? Or do I have to install the TA universal forwarder on all of the servers?
... View more
- Tags:
- license-master
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
06-05-2020
02:04 AM
|
Karma given to
