https://community.splunk.com/t5/Getting-Data-In/Multiple-AD-monitoring-with-Splunk/m-p/538063#M90187 <P>Hi everyone,</P><P>I have to implement a use case for a customer which basically means, monitoring AD events of ~10 Domain Controllers. Based on the documentation:&nbsp;<A href="https://docs.splunk.com/Documentation/Splunk/8.1.1/Data/MonitorActiveDirectory" target="_blank" rel="noopener">Monitor Active Directory - Splunk Documentation</A>&nbsp;I'm able t<SPAN>o monitor multiple domain controllers with one inputs.conf.&nbsp;</SPAN></P><P><SPAN>Would that mean, that I don't have to install on all those 10 Domain Controller the UF? And by installing the UF on the DC, do I have to chose a domain user with AD reading right instead of a local service user?<BR /><BR />Thank you!</SPAN></P> Mon, 01 Feb 2021 10:51:17 GMT g_paternicola 2021-02-01T10:51:17Z https://community.splunk.com/t5/Getting-Data-In/Multiple-AD-monitoring-with-Splunk/m-p/538063#M90187 <P>Hi everyone,</P><P>I have to implement a use case for a customer which basically means, monitoring AD events of ~10 Domain Controllers. Based on the documentation:&nbsp;<A href="https://docs.splunk.com/Documentation/Splunk/8.1.1/Data/MonitorActiveDirectory" target="_blank" rel="noopener">Monitor Active Directory - Splunk Documentation</A>&nbsp;I'm able t<SPAN>o monitor multiple domain controllers with one inputs.conf.&nbsp;</SPAN></P><P><SPAN>Would that mean, that I don't have to install on all those 10 Domain Controller the UF? And by installing the UF on the DC, do I have to chose a domain user with AD reading right instead of a local service user?<BR /><BR />Thank you!</SPAN></P> Mon, 01 Feb 2021 10:51:17 GMT https://community.splunk.com/t5/Getting-Data-In/Multiple-AD-monitoring-with-Splunk/m-p/538063#M90187 g_paternicola 2021-02-01T10:51:17Z