All Apps and Add-ons

Single Instance Splunk, no DS, deploy AD add-on

msaz
Path Finder

I've got a single instance splunk environment for testing and have it working just fine, but don't have a deployment server. I need to get Active Directory data into splunk and have everything configured, but I'm not sure what to do regarding deploying the Splunk Add-on for Microsoft Active Directory. Is there a way to configure the necessary apps/settings for a UF running on a DC without a DS?

0 Karma

adonio
Ultra Champion

Yes,
place the app in /etc/apps on your forwarder, restart the forwarder and go up and away!

p.s. you can use your single splunk as a deployment server if you wish to

hope it helps

0 Karma
Get Updates on the Splunk Community!

Get Schooled with Splunk Education: Explore Our Latest Courses

At Splunk Education, we’re dedicated to providing incredible learning experiences that cater to every skill ...

Splunk AI Assistant for SPL | Key Use Cases to Unlock the Power of SPL

Splunk AI Assistant for SPL | Key Use Cases to Unlock the Power of SPL  The Splunk AI Assistant for SPL ...

Buttercup Games: Further Dashboarding Techniques (Part 5)

This series of blogs assumes you have already completed the Splunk Enterprise Search Tutorial as it uses the ...