https://community.splunk.com/t5/Getting-Data-In/How-to-find-the-Active-Directory-and-ingest-data-from-it/m-p/436169#M76112 <P>The problem is resolved and hanks for the help.</P> Mon, 29 Jul 2019 15:05:37 GMT keldridg2 2019-07-29T15:05:37Z https://community.splunk.com/t5/Getting-Data-In/How-to-find-the-Active-Directory-and-ingest-data-from-it/m-p/436166#M76109 <P>Trying to get data from the AD data from the forwarder to Domain Controller. <BR /> Could not see any settings within Splunk that show Active Directory and am wondering how to ingest data from that.</P> Thu, 20 Jun 2019 15:10:13 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-find-the-Active-Directory-and-ingest-data-from-it/m-p/436166#M76109 keldridg2 2019-06-20T15:10:13Z https://community.splunk.com/t5/Getting-Data-In/How-to-find-the-Active-Directory-and-ingest-data-from-it/m-p/436167#M76110 <P>You would put a Universal Forwarder on the Domain Controller and configure it to send the data you want (Event Logs, perfmon metrics) to your indexer(s). On windows, the Universal Forwarder installation process allows you to define those things.</P> Thu, 20 Jun 2019 17:30:34 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-find-the-Active-Directory-and-ingest-data-from-it/m-p/436167#M76110 kmorris_splunk 2019-06-20T17:30:34Z https://community.splunk.com/t5/Getting-Data-In/How-to-find-the-Active-Directory-and-ingest-data-from-it/m-p/436168#M76111 <P>Hi @keldridg2 ,<BR /> I would recommend that you read some of the documentation on Splunk that explains exactly how to do this:</P> <P>Getting Data In:<BR /> <A href="https://docs.splunk.com/Documentation/Splunk/7.3.0/Data/WhatSplunkcanmonitor">https://docs.splunk.com/Documentation/Splunk/7.3.0/Data/WhatSplunkcanmonitor</A></P> <P>Monitoring Active Directory:<BR /> <A href="https://docs.splunk.com/Documentation/Splunk/7.3.0/Data/MonitorActiveDirectory">https://docs.splunk.com/Documentation/Splunk/7.3.0/Data/MonitorActiveDirectory</A></P> <P>These documents will provide you with the information you need to monitor Active Directory.</P> Thu, 20 Jun 2019 18:46:22 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-find-the-Active-Directory-and-ingest-data-from-it/m-p/436168#M76111 jnudell_2 2019-06-20T18:46:22Z https://community.splunk.com/t5/Getting-Data-In/How-to-find-the-Active-Directory-and-ingest-data-from-it/m-p/436169#M76112 <P>The problem is resolved and hanks for the help.</P> Mon, 29 Jul 2019 15:05:37 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-find-the-Active-Directory-and-ingest-data-from-it/m-p/436169#M76112 keldridg2 2019-07-29T15:05:37Z