See instructions for Windows 6.2, 6.3, or 6.4 and Linux 6.2, 6.3, or 6.4 at Splunk's documentation site).ĭownload the duo_splunk package from GitHub as a zip file and uncompress the package.įrom the command line, run the install script from within the duo_splunk directory with the following arguments: $. Splunk 6.2- 6.4 must be started in "legacy mode" to use the Duo plugin. This configuration was tested against versions 4.3.2, 5.0.7, 6.0.1, and 6.1.4. Learn more about Splunk's native support for Duo MFA in the online manual. Print hashlib.sha1(os.urandom(32)).hexdigest()Ĭlick the Save button when done. You can generate a random string in Python with: import os, hashlib If you'd like to use your own, it should be a mix of letters and numbers at least 40 characters long.
Splunk automatically generates an Application Secret Key for you. The maximum limit, in seconds, to complete authentication. )Īuthentication behavior when Duo Security is unavailableĬhoose **Let users login** to allow Splunk logins when Duo Security cloud services are unreachable, or **Do not let users login** to prevent access to Splunk without Duo authentication. Under "Multifactor Authentication", select Duo Security and then click Configure Duo Security.įill out the form with your Duo Splunk application information: Log into Splunk Enterprise as an admin and navigate to Settings → Users and Authentication → Access Controls.
CISCO NETWORKS APP FOR SPLUNK ENTERPRISE UPDATE
Read the Universal Prompt Update Guide for more information about the update process to support the new prompt, and watch the Duo Blog for future updates about the Duo Universal Prompt. You can also activate the new prompt experience for multiple supported applications from the report page instead of visiting the individual details pages for each application. This report shows the update availability and migration progress for all your Duo applications in-scope for Universal Prompt support. Universal Update ProgressĬlick the See Update Progress link to view the Universal Prompt Update Progress report. You'll later return to the settings on this page to activate the Universal Prompt for your Splunk users after Splunk releases the update. In the meantime, you can use Duo with Splunk and the traditional prompt experience.Īfter Splunk makes the necessary changes available you may need log in to Splunk as an admin to enable Duo Universal Prompt support. Please contact Splunk to request Duo Universal Prompt support for Splunk. The "Universal Prompt" section reflects this status as "Waiting on App Provider" with the activation options inaccessible. Splunk needs to update Splunk to support the Universal Prompt, but the update isn't available yet.
The new Universal Prompt provides a simplified and accessible Duo login experience for web-based applications, offering a redesigned visual interface with security and usability enhancements. Don't share it with unauthorized individuals or email it to anyone under any circumstances! Secure it as you would any sensitive credential. The security of your Duo application is tied to the security of your secret key (skey).