Learning, learning, learning . . . Our Splunk "expert" is gone, and the non-programmer gets to learn the task! How do you spell SPLUNK?
The dojo of Splunk. Learn, share, teach, mentor.
Videos
Latest Activity
Michael Wilde commented on Michael Wilde's video
Sure... When you do group mapping, map them to groups that don't have the domain admins in them. I have a separate OU=Groups that has "Splunk Users, Splunk Admins, Splunk Power Users" as group names, and specific users…
Mike Hartford commented on Michael Wilde's video
I want to give LDAP access to my splunk servcie but I don't want the LDAP users to have admin capabilitys in Splunk. Can I keep the domain admins out of Splunk if I have LDAP authentication???
Mike Hartford left a comment for Jonathan Hawes
Helow Jonathan,
Glad to have another Splunker. I've been useing Splunk for 2 years and am hooked. I leared how to spell splunk and | transaction too. you'll learn that one soon.
Go over to Splunk…
Mike Hartford commented on Mike Hartford's blog post 'tees for the holy day'
Holy Batskins Ninja, zzzzzwap zgruppp kapow a hidden stash, how great is that!!!!
The team that found them must have special bat senses and highly tooned Splunking skills
I like to wear Extra Lovable…
Splunk for Blue Coat Proxy SG - Setup help!
Recently, I've seen a number of folks who have been trying to use the Splunk for Blue Coat Proxy SG app and the proxy together so the logs come in to Splunk and they are displayed properly in Splunk.
Check out this guide, I hope it helps!
Big props go out to SplunkNinja community member and Blue Coat Pre-Sales ninja Ty Morton
Check out this guide, I hope it helps!
Big props go out to SplunkNinja community member and Blue Coat Pre-Sales ninja Ty Morton
-
Comment by Bob Munson on April 29, 2010 at 9:44am -
Two questions.
1 As it is this just seems to be setting up syslog on a new port. What do we gain over using 514?
2 Would it be easy to secure this with SSL?
-
Comment by Michael Wilde on April 29, 2010 at 6:29pm -
Bob. This is actually not syslog. While it is TCP, it's a push in to Splunk. My friend at BlueCoat helped we set up this method as he said BC isn't that great at syslogging. If you know otherwise let me know and we'll update the guide.
-
Comment by Bob Munson on May 1, 2010 at 9:33am
-
Thanks for the info. My customer wants to setup an SSL connection so when I get it working, I send an update.
Comment
© 2012 Created by Michael Wilde.
You need to be a member of splunkninja to add comments!
Join splunkninja