All Apps and Add-ons

BUG: ldapfilter does not properly output whenCreated field.

Communicator

App: SA-ldapsearch (Version 2.2.0)
There is a difference between the output of ldapsearch and ldapfilter when it comes to the whenCreated attribute.
In ldapfilter the output is not a date, but code that looks like it is supposed to format the date.
You can see it by running this query:

|ldapsearch domain=default search="(sAMAccountName=Administrator)" attrs="sAMAccountName,whenCreated"
|eval ldapsearch_whenCreated=whenCreated
|ldapfilter domain=default search="(sAMAccountName=$sAMAccountName$)" attrs="whenCreated"
|eval ldapfilter_whenCreated=whenCreated
|table sAMAccountName, ldapsearch_whenCreated, ldapfilter_whenCreated

alt text

0 Karma

SplunkTrust
SplunkTrust

can you post screenshots of the output for both

0 Karma

Path Finder

The same problem with the whenChanged attribute

0 Karma

Communicator

Yes of course.

0 Karma