https://community.splunk.com/t5/Getting-Data-In/inputs-conf-and-multiple-windows-AD-DC-entries/m-p/37980#M6971 <P>for each [WinEventLog: ] stanza in inputs.conf, can you specify more than one entry for evt_dc_name? Because what if one of the DCs goes down? Same question in relation to setting up LDAP authentication - can you specify more than one host/DC in the authentication.conf file, for redundancy?</P> Thu, 26 Aug 2010 22:20:50 GMT gsawyer1 2010-08-26T22:20:50Z https://community.splunk.com/t5/Getting-Data-In/inputs-conf-and-multiple-windows-AD-DC-entries/m-p/37980#M6971 <P>for each [WinEventLog: ] stanza in inputs.conf, can you specify more than one entry for evt_dc_name? Because what if one of the DCs goes down? Same question in relation to setting up LDAP authentication - can you specify more than one host/DC in the authentication.conf file, for redundancy?</P> Thu, 26 Aug 2010 22:20:50 GMT https://community.splunk.com/t5/Getting-Data-In/inputs-conf-and-multiple-windows-AD-DC-entries/m-p/37980#M6971 gsawyer1 2010-08-26T22:20:50Z https://community.splunk.com/t5/Getting-Data-In/inputs-conf-and-multiple-windows-AD-DC-entries/m-p/37981#M6972 <P>No you can not, but you can specify a DNS name that might point to a load-balanced/failover set of AD/LDAP servers.</P> <P>For example, AD domains are often set up such that the AD domain domainname.company.com resolves to list of available DCs for that domain.</P> Fri, 27 Aug 2010 00:18:28 GMT https://community.splunk.com/t5/Getting-Data-In/inputs-conf-and-multiple-windows-AD-DC-entries/m-p/37981#M6972 gkanapathy 2010-08-27T00:18:28Z