All Apps and Add-ons
Highlighted

Replicated AD Events (admon) for different DCs - Is there a way to collapse?

Explorer

Hi,

As admon collects changes to the ad and these events are replicated to all other DCs we have then got duplicate events from multiple DCs that are otherwise the same in every way apart from host. Is there a way besides just disabling it, to collapse these events together?

Labels (1)
0 Karma
Speak Up for Splunk Careers!

We want to better understand the impact Splunk experience and expertise has has on individuals' careers, and help highlight the growing demand for Splunk skills.