All Apps and Add-ons

Single Instance Splunk, no DS, deploy AD add-on

msaz
Path Finder

I've got a single instance splunk environment for testing and have it working just fine, but don't have a deployment server. I need to get Active Directory data into splunk and have everything configured, but I'm not sure what to do regarding deploying the Splunk Add-on for Microsoft Active Directory. Is there a way to configure the necessary apps/settings for a UF running on a DC without a DS?

0 Karma

adonio
Ultra Champion

Yes,
place the app in /etc/apps on your forwarder, restart the forwarder and go up and away!

p.s. you can use your single splunk as a deployment server if you wish to

hope it helps

0 Karma
Get Updates on the Splunk Community!

Introducing the Splunk Community Dashboard Challenge!

Welcome to Splunk Community Dashboard Challenge! This is your chance to showcase your skills in creating ...

Built-in Service Level Objectives Management to Bridge the Gap Between Service & ...

Wednesday, May 29, 2024  |  11AM PST / 2PM ESTRegister now and join us to learn more about how you can ...

Get Your Exclusive Splunk Certified Cybersecurity Defense Engineer Certification at ...

We’re excited to announce a new Splunk certification exam being released at .conf24! If you’re headed to Vegas ...