https://community.splunk.com/t5/Splunk-Enterprise/Monitor-Active-Directory/m-p/239810#M293 <P>Thanks for the response but i looked at the documentation for the add-on and it looks like it will only monitor certain information, nothing about AD. </P> <P><A href="http://docs.splunk.com/Documentation/WindowsAddOn/latest/User/AbouttheSplunkAdd-onforWindows">http://docs.splunk.com/Documentation/WindowsAddOn/latest/User/AbouttheSplunkAdd-onforWindows</A></P> <P>I also found this document on how to configure it from the command line but our version of splunk doesn't have a admon.conf file.</P> <P><A href="http://docs.splunk.com/Documentation/Splunk/5.0/Data/AuditActiveDirectory">http://docs.splunk.com/Documentation/Splunk/5.0/Data/AuditActiveDirectory</A></P> Thu, 18 Aug 2016 19:18:33 GMT mpopyk 2016-08-18T19:18:33Z https://community.splunk.com/t5/Splunk-Enterprise/Monitor-Active-Directory/m-p/239808#M291 <P>Hello,</P> <P>We are testing splunk light on a linux Ubuntu 14.04 machine. I was curious if you can monitor Active Directory with Splunk light or is that an enterprise feature? </P> <P>Thanks </P> Thu, 18 Aug 2016 13:19:31 GMT https://community.splunk.com/t5/Splunk-Enterprise/Monitor-Active-Directory/m-p/239808#M291 mpopyk 2016-08-18T13:19:31Z https://community.splunk.com/t5/Splunk-Enterprise/Monitor-Active-Directory/m-p/239809#M292 <P>Yes you can monitor AD with SL. The Windows add-on can help with that.</P> Thu, 18 Aug 2016 17:54:24 GMT https://community.splunk.com/t5/Splunk-Enterprise/Monitor-Active-Directory/m-p/239809#M292 rbittner_splunk 2016-08-18T17:54:24Z https://community.splunk.com/t5/Splunk-Enterprise/Monitor-Active-Directory/m-p/239810#M293 <P>Thanks for the response but i looked at the documentation for the add-on and it looks like it will only monitor certain information, nothing about AD. </P> <P><A href="http://docs.splunk.com/Documentation/WindowsAddOn/latest/User/AbouttheSplunkAdd-onforWindows">http://docs.splunk.com/Documentation/WindowsAddOn/latest/User/AbouttheSplunkAdd-onforWindows</A></P> <P>I also found this document on how to configure it from the command line but our version of splunk doesn't have a admon.conf file.</P> <P><A href="http://docs.splunk.com/Documentation/Splunk/5.0/Data/AuditActiveDirectory">http://docs.splunk.com/Documentation/Splunk/5.0/Data/AuditActiveDirectory</A></P> Thu, 18 Aug 2016 19:18:33 GMT https://community.splunk.com/t5/Splunk-Enterprise/Monitor-Active-Directory/m-p/239810#M293 mpopyk 2016-08-18T19:18:33Z