- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Single Instance Splunk, no DS, deploy AD add-on
msaz
Path Finder
05-08-2017
01:13 PM
I've got a single instance splunk environment for testing and have it working just fine, but don't have a deployment server. I need to get Active Directory data into splunk and have everything configured, but I'm not sure what to do regarding deploying the Splunk Add-on for Microsoft Active Directory. Is there a way to configure the necessary apps/settings for a UF running on a DC without a DS?
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content

adonio
Ultra Champion
05-08-2017
01:38 PM
Yes,
place the app in /etc/apps on your forwarder, restart the forwarder and go up and away!
p.s. you can use your single splunk as a deployment server if you wish to
hope it helps
