All Apps and Add-ons

Splunk app for windows infrastructure no Active Directory/Group policy info

pmovrich
Explorer

I have some of the domain controller info being pulled into the app like whats listed under
Active directory > domains
Active Directory > domain controllers.

But i don't see any of the active directory user, groups, computers or group policy info.

I tried configuring the app through tools and settings option and that didn't help.

When i do a ldap search:

|ldapsearch domain=SPL search="(objectClass=user)"

I get zero results.

any help?

0 Karma

jbernt_splunk
Splunk Employee
Splunk Employee

Have you configured the SA-ldapsearch/local/ldap.conf yet and turned on Auditing?

0 Karma
Get Updates on the Splunk Community!

Announcing Scheduled Export GA for Dashboard Studio

We're excited to announce the general availability of Scheduled Export for Dashboard Studio. Starting in ...

Extending Observability Content to Splunk Cloud

Watch Now!   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to leverage ...

More Control Over Your Monitoring Costs with Archived Metrics GA in US-AWS!

What if there was a way you could keep all the metrics data you need while saving on storage costs?This is now ...