The Guided Data Onboarding documentation assumes you are familiar with the Splunk software. If you are new to using Splunk Enterprise or to Splunk Cloud, see the Additional Resources topic in this manual.
To complete the tasks described in this manual, you must have the following:
- A distributed Splunk Enterprise deployment with indexer clustering enabled that is installed, running, and meets your hardware capacity requirements.
- Access to Splunk Web.
- A user role that permits apps installation.
Configure your Microsoft Active Directory domain to generate audit events
This documentation applies to the following versions of Splunk® Enterprise: 7.2.0, 7.2.1, 7.2.2, 7.2.3, 7.2.4, 7.2.5, 7.2.6, 7.2.7, 7.3.0, 7.3.1