×

Are you a member of the Splunk Community?

Sign in or Register with your Splunk account to get your questions answered, access valuable resources and connect with experts!
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Ask a Question
tdth
Explorer
Member since: ‎09-05-2024
‎02-23-2025
Community Statistics
Posts 5
Solutions 0
Karma Given 0
Karma Received 1
Member Since ‎09-05-2024
View All

Re: will server hardening (CIS redhat 9 level 1) ...

by in Deployment Architecture
‎02-23-2025 07:27 AM
‎02-23-2025 07:27 AM
Thanks, I guess we have no choice but to test it out. In your experience, what could be the impact to Splunk application? ... View more

Re: will server hardening (CIS redhat 9 level 1) ...

by in Deployment Architecture
‎02-23-2025 07:26 AM
‎02-23-2025 07:26 AM
As I mentioned, we want to harden the Linux server following CIS benchmark. There is long list of things to be done so it's hard to put down everything here... The goal is to make the server and the application more secured ... View more

will server hardening (CIS redhat 9 level 1) brea...

by in Deployment Architecture
‎02-10-2025 06:03 PM
‎02-10-2025 06:03 PM
Hi I have splunk servers (full deployment with index cluster, sh cluster) running on redhat 9. Now we want to harden the server following cis standard. Will this have any impact on Splunk application? Any exception need to be made?  Thanks ... View more

Re: Match Linux log to CIM

by in Splunk Enterprise Security
‎09-06-2024 07:03 AM
1 Karma
‎09-06-2024 07:03 AM
1 Karma
Thanks, so this means only certain out-of-box use cases can be used immediately. The rest would need some works to be done. ... View more

Match Linux log to CIM

by in Splunk Enterprise Security
‎09-05-2024 05:21 AM
‎09-05-2024 05:21 AM
Hi all, Has anyone had experience matching Linux audit logs to CIM before? I installed the Add-on for Unix and Linux, but it didn't help. Looking at some of the use cases in Security Essentials, it seems they expect data from EDR solutions like CrowdStrike or Symantec, rather than local Linux audit logs. Does this mean there is no way to use the out-of-the-box use cases created in Security Essentials/Enterprise Security for Linux logs?   Thanks ... View more
Labels
Contact Me
Online Status
Offline
Date Last Visited
‎02-23-2025 10:50 AM
Karma from
View All