×

Are you a member of the Splunk Community?

Sign in or Register with your Splunk account to get your questions answered, access valuable resources and connect with experts!
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Ask a Question
derchrischkya
Engager
Member since: ‎09-06-2023
‎07-23-2024
Community Statistics
Posts 2
Solutions 0
Karma Given 1
Karma Received 0
Member Since ‎09-06-2023
Activity Feed
View All

ProxySSO - Realname/Mail

by in Deployment Architecture
‎07-23-2024 01:38 AM
‎07-23-2024 01:38 AM
Hey Splunkers, is there any way to use "Realname" and "Mail" within ProxySSO setup? We are using ProxySSO for authentication and authorization. I figured out that this configuration on authorization.conf works and the user is showing up correctly:   [userToRoleMap_ProxySSO] myuser = myrole-1;myrole-2::test::mymail@test.com     Unfortunately I didn't find any way to populate this information from the ProxySSO information like i did for RemoteGroup and RemoteUser.   Kind Regards ... View more

Re: Automatic replication of lookup to indexer

by SplunkTrust in Deployment Architecture
‎09-06-2023 04:57 AM
1 Karma
‎09-06-2023 04:57 AM
1 Karma
Hi @derchrischkya, lookups are only on Search Heads, infact usually KV-Store is disabled on Indexers. The only ways to replicate lookups are: have a Search Head Cluster, where Lookups are automatically replicated between Search Heads, don't use lookups but Summary Indexes, that are saved on Indexers. You can use a summary index  as a lookup creating a scheduled search that saves in the summary index the same content of the lookup (e.g. every day). Ciao. Giuseppe ... View more
Contact Me
Online Status
Offline
Date Last Visited
‎07-23-2024 06:29 AM
Karma given to
View All