All Apps and Add-ons

How can I index the results of ldapsearch?

Ed_Alias
Path Finder

Hi,

I need to index lists of machines or users that I get with and ldapsearch,

I output them to CSV to make lookup,

BUT there are some cases where I would want results to be indexed.

How can I achieve this?

0 Karma
1 Solution

sduchene_splunk
Splunk Employee
Splunk Employee

Hello Edouard,
You may want to check the collect command :

http://docs.splunk.com/Documentation/Splunk/6.4.0/SearchReference/Collect

example :

myldapsearch | collect index=test

View solution in original post

somesoni2
Revered Legend
0 Karma

sduchene_splunk
Splunk Employee
Splunk Employee

Hello Edouard,
You may want to check the collect command :

http://docs.splunk.com/Documentation/Splunk/6.4.0/SearchReference/Collect

example :

myldapsearch | collect index=test

Kozanic
Path Finder

We are in a similar situation but need to run the LDAP search on a HF and have the results sent back to the indexers however, when we run the collect command, it seems to just store the stash file locally on the server rather than writing back to the indexers.

Anyway to work around this and force the write back to indexers?

0 Karma

Ed_Alias
Path Finder

looks perfect,

thanks Simon 🙂

0 Karma
Get Updates on the Splunk Community!

Webinar Recap | Revolutionizing IT Operations: The Transformative Power of AI and ML ...

The Transformative Power of AI and ML in Enhancing Observability   In the realm of IT operations, the ...

.conf24 | Registration Open!

Hello, hello! I come bearing good news: Registration for .conf24 is now open!   conf is Splunk’s rad annual ...

ICYMI - Check out the latest releases of Splunk Edge Processor

Splunk is pleased to announce the latest enhancements to Splunk Edge Processor.  HEC Receiver authorization ...