topic Exchange App Distribution List Report not working in Reporting

Exchange App Distribution List Report not working

andykiely — Tue, 04 Jun 2013 09:31:03 GMT

Hi there,

Does anyone know where this data comes from? I can't see a sourcetype similar in my msexchange index.

Cheers
Andy

Re: Exchange App Distribution List Report not working

jbernt_splunk — Wed, 07 Aug 2013 17:09:50 GMT

Exchange distribution lists are retrieved directly from Active Directory using the ldapgroup command from the SA-ldapsearch component. Reference here for installing the Supporting Add-on for Active Directory (SA-ldapsearch) here: http://docs.splunk.com/Documentation/MSExchange/latest/DeployMSX/InstallthecentralSplunkforMSExchangeappinstance

Re: Exchange App Distribution List Report not working

andykiely — Tue, 10 Sep 2013 09:43:58 GMT

I have this installed and configured and can use it to query AD, this all works okay. I did have some config errors in ldap.conf which seem to have been fixed. My Active directory App doesn't seem suffer the same issue.

Regards
Andy