All Apps and Add-ons

Replicated AD Events (admon) for different DCs - Is there a way to collapse?

esalmon
Explorer

Hi,

As admon collects changes to the ad and these events are replicated to all other DCs we have then got duplicate events from multiple DCs that are otherwise the same in every way apart from host. Is there a way besides just disabling it, to collapse these events together?

Labels (1)
0 Karma
Take the 2021 Splunk Career Survey

Help us learn about how Splunk has
impacted your career by taking the 2021 Splunk Career Survey.

Earn $50 in Amazon cash!