The ldaptestconnection command
The 'ldaptestconnection' command tests the connection to each of the hosts servicing the LDAP directory identified by domain. It must be placed at the beginning of a search pipeline. A sample usage follows:
| ldaptestconnection domain=default
There are several possible arguments:
|domain=<domain>||Specifies the name of a configuration stanza in ldap.conf. If you do not specify a domain, the command uses the default stanza.|
|debug=<boolean>||Specifies whether or not ldapfetch should write debug log data. When set to T, specifies that debug logging should occur.|
|logging_level=(CRITICAL|ERROR|WARNING|INFO|DEBUG)||Specifies the logging level for the $SPLUNK_HOME/var/log/splunk/SA-ldapsearch.log file. Splunk can access this file with the "index=_internal sourcetype=SA-ldapsearch" search and exposes the following fields:
File: Full pathname of the source file where the logging call was made.
On return, ldaptestconnection generates a single event record for each host servicing the LDAP directory identified by the default domain. Each record contains the host name and the distinguished name of the domain. If the connection test fails for any reason, an error message is produced instead.
To test the connection for the SPL domain:
| ldaptestconnection domain=SPL
The ldapgroup command
Troubleshoot the Splunk Supporting Add-on for Active Directory
This documentation applies to the following versions of Splunk® Supporting Add-on for Active Directory: 2.1.0, 2.1.1, 2.1.2, 2.1.3, 2.1.4, 2.1.5, 2.1.6, 2.1.7, 2.1.8, 2.2.0, 2.2.1, 3.0.0, 3.0.1, 3.0.2