Splunk® App for Windows Infrastructure

Deploy and Use the Splunk App for Windows Infrastructure

Download manual as PDF

Download topic as PDF

Permissions checklist

This topic details the list of permissions you must have in order to install the Splunk App for Windows Infrastructure.

Administrative access to Active Directory

In order to make changes to Active Directory services, such as enabling debug logging in DNS and increasing Active Directory audit policy, you must be a domain administrator in the Active Directory domain(s) you want to monitor.

Administrative access to Windows servers

You must have administrative access to all Windows hosts in the Splunk App for Windows Infrastructure deployment. The hosts in the deployment require this access to install Splunk Enterprise. Any hosts in the field also require this access to install universal forwarders. Splunk Enterprise must run as a user with administrative access to the host (usually, the Local System user).

PREVIOUS
Platform and hardware requirements
  NEXT
What data the Splunk App for Windows Infrastructure collects

This documentation applies to the following versions of Splunk® App for Windows Infrastructure: 1.4.2, 1.4.3, 1.4.4, 1.5.0, 1.5.1, 1.5.2, 2.0.0


Was this documentation topic helpful?

Enter your email address, and someone from the documentation team will respond to you:

Please provide your comments here. Ask a question or make a suggestion.

You must be logged into splunk.com in order to post comments. Log in now.

Please try to keep this discussion focused on the content covered in this documentation topic. If you have a more general question about Splunk functionality or are experiencing a difficulty with Splunk, consider posting a question to Splunkbase Answers.

0 out of 1000 Characters