Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- About MLGSPLUNK
MLGSPLUNK
Path Finder
Member since:
07-14-2020
08-11-2021
Community Statistics
| Posts | 29 |
| Solutions | 2 |
| Karma Given | 16 |
| Karma Received | 0 |
| Member Since | 07-14-2020 |
Activity Feed
- Posted SPLUNK Infosec (or SecEssentials) + Monitoring AD : Is CIM compliant by default? on Getting Data In. 03-15-2021 09:54 AM
- Tagged SPLUNK Infosec (or SecEssentials) + Monitoring AD : Is CIM compliant by default? on Getting Data In. 03-15-2021 09:54 AM
- Tagged SPLUNK Infosec (or SecEssentials) + Monitoring AD : Is CIM compliant by default? on Getting Data In. 03-15-2021 09:54 AM
- Posted Re: Security investigation - Correlating values similar values from different sources on Splunk Dev. 03-15-2021 05:22 AM
- Karma Re: Security investigation - Correlating values similar values from different sources for scelikok. 03-15-2021 05:21 AM
- Posted Security investigation - Correlating values similar values from different sources on Splunk Dev. 03-15-2021 04:14 AM
- Posted Re: SPL - mergin two values of a field into the same one on Splunk Dev. 03-14-2021 11:43 PM
- Karma Re: SPL - mergin two values of a field into the same one for scelikok. 03-14-2021 11:42 PM
- Posted Re: SPL - mergin two values of a field into the same one on Splunk Dev. 03-09-2021 12:31 PM
- Posted Re: SPL - mergin two values of a field into the same one on Splunk Dev. 03-09-2021 10:43 AM
- Posted Re: SPL - mergin two values of a field into the same one on Splunk Dev. 03-09-2021 10:40 AM
- Karma Re: SPL - mergin two values of a field into the same one for richgalloway. 03-09-2021 10:38 AM
- Posted SPL - mergin two values of a field into the same one on Splunk Dev. 03-09-2021 08:19 AM
- Posted Re: Index cluster - what would cause the greatest reduction of disk space: RF or SF? on Installation. 03-05-2021 01:05 AM
- Karma Re: Index cluster - what would cause the greatest reduction of disk space: RF or SF? for isoutamo. 03-05-2021 01:04 AM
- Posted Re: Splunk architect exam - questions and material on Training + Certification Discussions. 03-04-2021 12:59 AM
- Karma Re: Splunk architect exam - questions and material for amesser. 03-04-2021 12:59 AM
- Posted Re: Index cluster - what would cause the greatest reduction of disk space: RF or SF? on Installation. 03-04-2021 12:52 AM
- Karma Re: Index cluster - what would cause the greatest reduction of disk space: RF or SF? for scelikok. 03-04-2021 12:50 AM
- Posted Index cluster - what would cause the greatest reduction of disk space: RF or SF? on Installation. 03-03-2021 11:57 PM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 |
03-15-2021
09:54 AM
Hi community. We are trying to integrate the new InfoSec app with the AD monitoring. For this, we have deployed a windows splunk that will ingest from our AD and forward the events to the UIX indexer. Questions: - Do we need to install any AD add on on the windows HF? - Is the AD data CIM compliant by default? - We are running infosec at the UIX server, already CIM compliant. How do we manage the AD data that will be indexed if its not CIM comply by default? Do we need to make it compliant manually? Can we install any addon to make it compliant and just use the windows as a HF? Thanks in advance.
... View more
Labels
- Labels:
-
other
03-15-2021
05:22 AM
@scelikok it makes perfect sense. Thanks!
... View more
03-14-2021
11:43 PM
@scelikok Thanks a lot.
... View more
03-05-2021
01:05 AM
@isoutamo not a real config, just wanted to show the big difference if we reduce one factor or the other. Thanks for the heads-up!
... View more
03-04-2021
12:59 AM
@amesser that is for sure, and will follow the guides. Edited the message. Thanks a lot for the insight!
... View more
02-02-2021
04:16 AM
Thanks @scelikok for your fast answer, then it makes total sense for me, and learn something else. So at the end: - SH stablished as a search peer for the MC - SH forward all its internals to idx cluster. Ty.
... View more
09-07-2020
07:17 AM
Yes, that would do. In my case i didn't inherited any role but it all has to do with license permission. Search restriction works fine.
... View more
07-20-2020
01:51 AM
Hi all. It seems that there was an issue with the license of Splunk I was using. After the license change, I restarted everything and it worked fine. Thanks all for the input.
... View more
07-15-2020
02:11 AM
Hi! I am running on the same issue as you did but on splunk 8.0.5. No roles are inherited and only search is granted to the user, but the search terms for the restrict search are not working at all and the user can see all the data. https://community.splunk.com/t5/Splunk-Search/Restrict-search-to-a-role-using-a-search-restriction-is-not/m-p/509197#M142301 Thanks in advance.
... View more
