All Apps and Add-ons

Single Instance Splunk, no DS, deploy AD add-on

msaz
Path Finder

I've got a single instance splunk environment for testing and have it working just fine, but don't have a deployment server. I need to get Active Directory data into splunk and have everything configured, but I'm not sure what to do regarding deploying the Splunk Add-on for Microsoft Active Directory. Is there a way to configure the necessary apps/settings for a UF running on a DC without a DS?

0 Karma

adonio
Ultra Champion

Yes,
place the app in /etc/apps on your forwarder, restart the forwarder and go up and away!

p.s. you can use your single splunk as a deployment server if you wish to

hope it helps

0 Karma
Get Updates on the Splunk Community!

Routing Data to Different Splunk Indexes in the OpenTelemetry Collector

This blog post is part of an ongoing series on OpenTelemetry. The OpenTelemetry project is the second largest ...

Getting Started with AIOps: Event Correlation Basics and Alert Storm Detection in ...

Getting Started with AIOps:Event Correlation Basics and Alert Storm Detection in Splunk IT Service ...

Register to Attend BSides SPL 2022 - It's all Happening October 18!

Join like-minded individuals for technical sessions on everything Splunk!  This is a community-led and run ...