All Apps and Add-ons

The SA-ldapsearch - Splunk Supporting Add-on for Active Directory does not show all users in the domain admins group.

sheaross
Explorer

I'm trying to create a report/dashboard that will show all users in the domain admins group, the query below does work and will create a report but the report is also missing users inside of the domain admins group. The users that are missing have their primary group set to domain admins.(This could be the issue) or a bug that inside of the Splunk Supporting Add-on for Active Directory. Any ideas?

| ldapsearch domain="domain" search="(&(objectclass=group)(cn=Domain Admins))"|fields *
| ldapgroup
| table member_name,member_type,member_dn
| sort member_name
| rename member_name as "Username",member_type as "Membership Type"
| search (Username !="" OR member_domain !="" OR Domain !="")

0 Karma
Get Updates on the Splunk Community!

Splunk AI Assistant for SPL | Key Use Cases to Unlock the Power of SPL

Splunk AI Assistant for SPL | Key Use Cases to Unlock the Power of SPL  The Splunk AI Assistant for SPL ...

Buttercup Games: Further Dashboarding Techniques (Part 5)

This series of blogs assumes you have already completed the Splunk Enterprise Search Tutorial as it uses the ...

Customers Increasingly Choose Splunk for Observability

For the second year in a row, Splunk was recognized as a Leader in the 2024 Gartner® Magic Quadrant™ for ...