topic Re: Splunk report to fetch disabled AD accounts. in Getting Data In https://community.splunk.com/t5/Getting-Data-In/Splunk-report-to-fetch-disabled-AD-accounts/m-p/678453#M113377 <P>Hi&nbsp;<a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/265235">@jatin</a>,</P><P>have you installed the SA-LDAPSearch Add-On.</P><P>Ciao.</P><P>Giuseppe</P> Fri, 23 Feb 2024 09:41:55 GMT gcusello 2024-02-23T09:41:55Z Splunk report to fetch disabled AD accounts. https://community.splunk.com/t5/Getting-Data-In/Splunk-report-to-fetch-disabled-AD-accounts/m-p/678449#M113374 <P><SPAN>Hello experts... I need help... I want to fetch disabled AD account users...&nbsp;Can someone share splunk query for the same.</SPAN></P> Fri, 23 Feb 2024 09:38:20 GMT https://community.splunk.com/t5/Getting-Data-In/Splunk-report-to-fetch-disabled-AD-accounts/m-p/678449#M113374 jatin 2024-02-23T09:38:20Z Re: Splunk report to fetch disabled AD accounts. https://community.splunk.com/t5/Getting-Data-In/Splunk-report-to-fetch-disabled-AD-accounts/m-p/678453#M113377 <P>Hi&nbsp;<a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/265235">@jatin</a>,</P><P>have you installed the SA-LDAPSearch Add-On.</P><P>Ciao.</P><P>Giuseppe</P> Fri, 23 Feb 2024 09:41:55 GMT https://community.splunk.com/t5/Getting-Data-In/Splunk-report-to-fetch-disabled-AD-accounts/m-p/678453#M113377 gcusello 2024-02-23T09:41:55Z Re: Splunk report to fetch disabled AD accounts. https://community.splunk.com/t5/Getting-Data-In/Splunk-report-to-fetch-disabled-AD-accounts/m-p/678461#M113380 <P>Hello&nbsp;<a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/161352">@gcusello</a>... I am not aware... I am new to Splunk... As I got this environment few days back and trying to work on my managers requirements... Please share steps or links for Add-On installation</P> Fri, 23 Feb 2024 09:54:02 GMT https://community.splunk.com/t5/Getting-Data-In/Splunk-report-to-fetch-disabled-AD-accounts/m-p/678461#M113380 jatin 2024-02-23T09:54:02Z Re: Splunk report to fetch disabled AD accounts. https://community.splunk.com/t5/Getting-Data-In/Splunk-report-to-fetch-disabled-AD-accounts/m-p/678493#M113386 <P>Hi&nbsp;<a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/265235">@jatin</a>,</P><P>download the app from&nbsp;<A href="https://splunkbase.splunk.com/app/1151" target="_blank">https://splunkbase.splunk.com/app/1151</A>&nbsp;and follow the instruction at&nbsp;<A href="https://docs.splunk.com/Documentation/SA-LdapSearch/3.0.8/User/AbouttheSplunkSupportingAdd-onforActiveDirectory" target="_blank">https://docs.splunk.com/Documentation/SA-LdapSearch/3.0.8/User/AbouttheSplunkSupportingAdd-onforActiveDirectory</A></P><P>Ciao.</P><P>Giuseppe</P> Fri, 23 Feb 2024 14:23:17 GMT https://community.splunk.com/t5/Getting-Data-In/Splunk-report-to-fetch-disabled-AD-accounts/m-p/678493#M113386 gcusello 2024-02-23T14:23:17Z