https://community.splunk.com/t5/All-Apps-and-Add-ons/Example-of-Active-Directory-lookup/m-p/85998#M5545 <P>Can anyone provide me an exemple of what the DomainList.csv and DomainSelector.csv lookups look like in the Splunk for Active Directory app?</P> <P>I am only collecting the event log, so these lookups are not being generated, so I will have to create them manually to make the app work as expected.</P> Fri, 05 Jul 2013 12:35:05 GMT krugger 2013-07-05T12:35:05Z https://community.splunk.com/t5/All-Apps-and-Add-ons/Example-of-Active-Directory-lookup/m-p/85998#M5545 <P>Can anyone provide me an exemple of what the DomainList.csv and DomainSelector.csv lookups look like in the Splunk for Active Directory app?</P> <P>I am only collecting the event log, so these lookups are not being generated, so I will have to create them manually to make the app work as expected.</P> Fri, 05 Jul 2013 12:35:05 GMT https://community.splunk.com/t5/All-Apps-and-Add-ons/Example-of-Active-Directory-lookup/m-p/85998#M5545 krugger 2013-07-05T12:35:05Z https://community.splunk.com/t5/All-Apps-and-Add-ons/Example-of-Active-Directory-lookup/m-p/85999#M5546 <P>cat /opt/splunk/etc/apps/Splunk_for_ActiveDirectory/lookups/DomainList.csv</P> <PRE><CODE>host,"src_nt_domain" PDC01,PROD PDC02,PROD SDC02,STAGE sdc01,STAGE pdc3,PROD </CODE></PRE> <P>cat /opt/splunk/etc/apps/Splunk_for_ActiveDirectory/lookups/DomainSelector.csv</P> <PRE><CODE>host,DomainNetBIOSName,DomainDNSName,ForestName,Site sdc1,STAGE,"Stage.local","Stage.local","Default-First-Site-Name" sdc2,STAGE,"Stage.local","Stage.local","Default-First-Site-Name" PDC01,PROD,"Production.local","Production.local","Main-Office" PDC02,PROD,"Production.local","Production.local","Main-Office" pdc3,PROD,"Production.local","Production.local","DR-Site" </CODE></PRE> Mon, 28 Sep 2020 14:16:13 GMT https://community.splunk.com/t5/All-Apps-and-Add-ons/Example-of-Active-Directory-lookup/m-p/85999#M5546 treinke 2020-09-28T14:16:13Z