topic domain_aliases.csv and active_directory.csv in Splunk Dev

domain_aliases.csv and active_directory.csv

nazt — Mon, 28 Sep 2020 11:34:31 GMT

In the deployment manual, it mention that to edit the above files to configure the lookups. However, I cant find the file.

Actually, I cant find the %SPLUNK_HOME%\etc\apps\Splunk_for_Exchange\local\ mentioned in the manual.

Where can I find those? All of the users are @unknown now =/

Re: domain_aliases.csv and active_directory.csv

cphair — Mon, 28 Sep 2020 11:34:48 GMT

Have you actually installed the Splunk for Exchange App? If so, that directory should be on your main indexer or search head--browse to whatever directory you installed Splunk in, then go to the subdirectory etc\apps\Splunk_for_Exchange\local.

Re: domain_aliases.csv and active_directory.csv

nazt — Tue, 27 Mar 2012 02:08:55 GMT

Yeah, I did install, but the local directory does not exist.

All I have is appserver, bin, default, lookups and metadata folder.

Re: domain_aliases.csv and active_directory.csv

nycrober — Wed, 11 Apr 2012 17:28:49 GMT

I have the same issue, the local directory does not exist only appserver, bin, default, lookups and metadata folder

Re: domain_aliases.csv and active_directory.csv

ahall_splunk — Sat, 26 May 2012 18:22:39 GMT

The local directory does not exist by default. Just create it and place the two files according to the documentation in that directory.