Data and source types for the Splunk Supporting Add-on for Active Directory
The Splunk Supporting Add-on for Active Directory performs LDAP queries against Active Directory. As the main function of the add-on is to provide data from an external source, it does not collect data like other add-ons do.
The add-on provides the following source type:
Log File | Log Format | Source Type | Default File Location |
---|---|---|---|
SA-LDAPsearch log file | Plain text | SA-Ldapsearch
|
$SPLUNK_HOME/var/log/splunk/sa-ldapsearch.log
|
SA-LDAPsearch.log
The SA-LDAPsearch.log file contains debugging information from the various SA-LDAPsearch commands.
The ldap.conf configuration file | Release Notes for Splunk Supporting Add-on for Active Directory |
This documentation applies to the following versions of Splunk® Supporting Add-on for Active Directory: 3.0.8
Feedback submitted, thanks!