Splunk Supporting Add-on for Active Directory vs Splunk Add-on for Windows

[cboillot]

How does Splunk Supporting Add-on for Active Directory compare with Splunk Add-on for Windows. Is one better over the other? Can they be used together?

[jacobpevans · Accepted solution]

Greetings @cboillot,

https://splunkbase.splunk.com/app/3207/ (Splunk Add-on for Microsoft Active Directory) - On the very first line of the overview, it points you to https://www.splunk.com/blog/2019/03/18/end-of-availability-splunk-built-apps-and-add-ons.html?April which says this:

Splunk Add-on for Microsoft Active Directory
Announced: April 8, 2019 | Ends: July 7, 2019
This application has been superseded by the Splunk Add-on for Windows and the functionality has been incorporated into it. Check out the Splunk Add-on for Microsoft here and for more information see the release notes for the latest version.

This is the app you want: https://splunkbase.splunk.com/app/742/

[cboillot]

I was aware of that, but the question remains. I will edit the question.

[jacobpevans]

You only want this one: https://splunkbase.splunk.com/app/742/

Any others should be considered deprecated. Their features are built in to Splunk Add-on for Microsoft Windows

[cboillot]

Just so I am clear, that includes Splunk Supporting Add-on for Active Directory?

[jacobpevans]

Yes, it does.

[cboillot]

Thank you!