Activity Feed
- Got Karma for Re: How can I exclude disabled Active Directory user accounts from Splunk?. 06-05-2020 12:47 AM
- Got Karma for Re: How can I exclude disabled Active Directory user accounts from Splunk?. 06-05-2020 12:47 AM
- Got Karma for Re: Why am I getting a timeout error in Splunk trying to update the LDAP server?. 06-05-2020 12:47 AM
- Karma Re: SQL Server ERRORLOG for stepmmx. 06-05-2020 12:45 AM
- Posted Re: Why am I getting a timeout error in Splunk trying to update the LDAP server? on Security. 08-31-2015 03:09 PM
- Posted Re: How can I exclude disabled Active Directory user accounts from Splunk? on Security. 04-09-2015 01:23 PM
- Posted Re: mapping users to role on Security. 03-27-2014 09:56 AM
- Posted Re: mapping users to role on Security. 03-27-2014 08:18 AM
- Posted Re: Syslog forwarding and rewrite of host on Getting Data In. 01-21-2014 07:52 AM
- Posted Re: SQL Server ERRORLOG on Security. 02-13-2012 08:27 AM
Topics I've Started
No posts to display.
You may have logged in using a LDAP account. Make sure to use a local account when making LDAP configuration changes
... View more
To configure Splunk to ignore inactive account, simply add the userAccountControl as follow in the "User base filter" field:
(&(objectCategory=Person)(sAMAccountName=*)(!(userAccountControl:1.2.840.113556.1.4.803:=2)))
... View more
03-27-2014
09:56 AM
The only way I can think of is to use scripted authentication.
You can find more info at http://docs.splunk.com/Documentation/Splunk/latest/Security/ConfigureSplunkToUsePAMOrRADIUSAuthentication.
-Ming
... View more
03-27-2014
08:18 AM
We are using LDAP group and then map Splunk role with each LDAP group. Role is assigned to LDAP users by adding them to the appropriate LDAP group.
In your case without using LDAP groups, if admin role users can log in then by the same token, you can assign users to Splunk role 'user' as follow under 'roleMap_SHC' stanza:
[roleMap_SHC]
admin = lbirnba;pbussie;rsen0;vjaiswa
user = ; ;
Ming
... View more
01-21-2014
07:52 AM
How should the outputs.conf be configured with props.conf and transforms.conf configured as above?
... View more
