Splunk Supporting Add-on for Active Directory (SA-LDAPSearch): is there a limit for number of events that ldapfilter can handle?

[cafissimo]

Hello.

Please, I would like to know if there is a limit for the ldapfilter command, maybe 50.000?

Thanks in advance and kind regards.

[aholzel]

I don't have experience with the SA-LDAPSearch but I do know that by default the Active Directory gives back "paged" results with a max of 1500 users on a page. so you need to "scroll" through the pages in some way.