Security

How do we list the users within an ldap group?

ddrillic
Ultra Champion

We would like to produce a report which lists all the users who belong to a certain ldap group.

The following brings users -

| rest services/authentication/users | where roles="xxx" | table title, email, realname

We are not sure whether this call brings back what we want or rather all users of this ldap group who are currently logged in.

Any idea?

Tags (4)
0 Karma
1 Solution

joshd
Builder

The REST point you're calling represents all users and not just currently logged in users. Therefore what is returned should be representative of all users mapped into the given role whether they are system or LDAP user.

Always good to keep the REST URI Quick Reference link in your back pocket: http://docs.splunk.com/Documentation/Splunk/6.4.0/RESTREF/RESTlist

View solution in original post

joshd
Builder

The REST point you're calling represents all users and not just currently logged in users. Therefore what is returned should be representative of all users mapped into the given role whether they are system or LDAP user.

Always good to keep the REST URI Quick Reference link in your back pocket: http://docs.splunk.com/Documentation/Splunk/6.4.0/RESTREF/RESTlist

ddrillic
Ultra Champion

Perfect joshd. This is what I thought. Much appreciated.

0 Karma
Get Updates on the Splunk Community!

What's new in Splunk Cloud Platform 9.1.2312?

Hi Splunky people! We are excited to share the newest updates in Splunk Cloud Platform 9.1.2312! Analysts can ...

What’s New in Splunk Security Essentials 3.8.0?

Splunk Security Essentials (SSE) is an app that can amplify the power of your existing Splunk Cloud Platform, ...

Let’s Get You Certified – Vegas-Style at .conf24

Are you ready to level up your Splunk game? Then, let’s get you certified live at .conf24 – our annual user ...