LDAP search on HF to Cloud

[janroc]

Hi all,

We are going to the Splunk cloud and want to keep the LDAP search also in cloud.
Today we have install the app on a search head and with working commands.
I know how to forward the data to splunk cloud from a HF, but what about the ldap command?
Like ldapgroup etc? do we need to install the app in Cloud also to get the commands to work?

//Jan

[richgalloway]

The LDAP app is compatible with Splunk Cloud so you should be able to install it.  You will need the app on the Cloud SHs for your existing searches to work.  Keep in mind, however, that it requires access to your Active Directory system, which means your AD team must be willing to allow access from your Splunk Cloud search heads (the Internet).  Many AD teams won't allow that.