About the Splunk Supporting Add-on for Active Directory
The Splunk Supporting Add-on for Active Directory allows you to collect Active Directory schema and other information from Active Directory as events and filter on those events.
The Splunk Supporting Add-on for Active Directory was last updated on Monday, October 27, 2014.
How does it work?
The Splunk Supporting Add-on for Active Directory has the following uses:
- To generate events based on the contents of an LDAP server such as Active Directory.
- To augment events with information from an LDAP server such as Active Directory.
- To perform Active Directory group expansions.
In order to use the Splunk Supporting Add-on for Active Directory, you must configure it. Read "Install the Splunk Supporting Add-on for Active Directory" to learn how.
How do I get it?
You can download the add-on from Splunk Apps.
How do I upgrade from a previous version?
To upgrade from a previous version of the Splunk Supporting Add-on for Active Directory, install this version directly on top of the previous version. You can use Splunk Web or the CLI, or you can upgrade it from the command line.
Note: If you have a previous version installed, on upgrade, the app maintains ldap.conf
from the previous installation. When you add any new domains to search, the add-on stores the credentials securely, instead of in the ldap.conf file. If you edit an existing domain entry using the new Configuration page, it also stores those credentials securely. Existing entries that you do not edit continue to have their credentials stored locally.
What search commands come with it?
There are four search commands in this add-on. Once configured, the add-on uses the configuration for all the commands. You can learn more about the commands in the following topics:
- The "ldapsearch" command
- The "ldapfilter" command
- The "ldapfetch" command
- The "ldapgroup" command
NEXT How this add-on fits into the Splunk picture |
This documentation applies to the following versions of Splunk® Supporting Add-on for Active Directory: 2.0.0
Feedback submitted, thanks!