All Apps and Add-ons

How can I index the results of ldapsearch?

Ed_Alias
Path Finder

Hi,

I need to index lists of machines or users that I get with and ldapsearch,

I output them to CSV to make lookup,

BUT there are some cases where I would want results to be indexed.

How can I achieve this?

0 Karma
1 Solution

sduchene_splunk
Splunk Employee
Splunk Employee

Hello Edouard,
You may want to check the collect command :

http://docs.splunk.com/Documentation/Splunk/6.4.0/SearchReference/Collect

example :

myldapsearch | collect index=test

View solution in original post

somesoni2
Revered Legend
0 Karma

sduchene_splunk
Splunk Employee
Splunk Employee

Hello Edouard,
You may want to check the collect command :

http://docs.splunk.com/Documentation/Splunk/6.4.0/SearchReference/Collect

example :

myldapsearch | collect index=test

Kozanic
Path Finder

We are in a similar situation but need to run the LDAP search on a HF and have the results sent back to the indexers however, when we run the collect command, it seems to just store the stash file locally on the server rather than writing back to the indexers.

Anyway to work around this and force the write back to indexers?

0 Karma

Ed_Alias
Path Finder

looks perfect,

thanks Simon 🙂

0 Karma
Get Updates on the Splunk Community!

Now Playing: Splunk Education Summer Learning Premieres

It’s premiere season, and Splunk Education is rolling out new releases you won’t want to miss. Whether you’re ...

The Visibility Gap: Hybrid Networks and IT Services

The most forward thinking enterprises among us see their network as much more than infrastructure – it's their ...

Get Operational Insights Quickly with Natural Language on the Splunk Platform

In today’s fast-paced digital world, turning data into actionable insights is essential for success. With ...