Splunk® Supporting Add-on for Active Directory

Deploy and Use the Splunk Supporting Add-on for Active Directory (SA-LDAPSearch)

This documentation does not apply to the most recent version of Splunk® Supporting Add-on for Active Directory. For documentation on the most recent version, go to the latest release.

Release Notes

This topic contains information on new features, known issues, and updates as we version the Splunk Supporting Add-on for Active Directory.

Version 2.0.1 of the Splunk Supporting Add-on for Active Directory was released on Tuesday, December 9, 2014.

What's new

Here's what's new in the latest version of the Splunk Supporting Add-on for Active Directory:

  • Bug fixes.
  • The add-on now has improved usability and feedback on its configuration page. (TAG-4581)
  • The add-on now provides a host field that contains the domain controller that it bound to when it performed its operation. The ldapsearch command returns this field in results. (TAG-2115)
  • The add-on now allows you to not perform decoding of special fields in Active Directory. If you set decode=f in a command, it does not perform decoding of fields. See the configuration options for each command for details. (TAG-3303)
  • The add-on no longer lets you save alternate domain names that are not unique. (TAG-3371, TAG-4582)

Current known issues

The Splunk Add-on for Windows has the following known issues:

  • No known issues at this time.

Change log (what's been fixed)

  • The add-on now has a document link in the main search page. (TAG_3314)
  • The default logging level for the add-on has been raised from DEBUG to WARNING. (TAG-3271)
  • The add-on now properly decodes file time, sAMAccountType, userAccountControl, instanceType, and groupType fields. (TAG-3299, TAG-3300, TAG-3301, TAG-3302, TAG-3304)
  • The add-on no longer uses the default password when attempting to connect to a newly-configured connection. (TAG-3350)
  • A condition that caused a traceback when you entered an incorrect LDAP attribute name was fixed. (TAG-3349)
  • The add-on now displays the domain you specified (instead of None) in the error message it generates when you specify an invalid domain. (TAG-4576)
  • The add-on now skips unrecognized search result types and prints an error message. This happens when the add-on cannot follow a search result continuation referral. (TAG-3372)
  • The add-on now lets you save and test connections in the Safari and Chrome browsers. (TAG-4580)
Last modified on 09 December, 2014
Data and source types for the Splunk Supporting Add-on for Active Directory   Third-party software attributions/credits

This documentation applies to the following versions of Splunk® Supporting Add-on for Active Directory: 2.0.1


Was this topic useful?







You must be logged into splunk.com in order to post comments. Log in now.

Please try to keep this discussion focused on the content covered in this documentation topic. If you have a more general question about Splunk functionality or are experiencing a difficulty with Splunk, consider posting a question to Splunkbase Answers.

0 out of 1000 Characters