I'm trying to setup multiple forests with the Splunk App for AD. Specifically, I'm editing the activedirectory.conf file. Is there a way for it to search multiple LDAP sources for user information?
Not currently. However, there is a new release next week (v1.1) that corrects this oversight in the LDAP lookup commands.
Not currently. However, there is a new release next week (v1.1) that corrects this oversight in the LDAP lookup commands.