All Apps and Add-ons

What data does the powershell scripts in microsoft windows add-ons collect?

daniellim
Explorer

I would like to know what data does the powershell scripts in the various microsoft windows add-ons collect?

What data will I not be able to collect, if i disable powershell scripts?

0 Karma
1 Solution

daniellim
Explorer

Splunk add-on for Microsoft active directory PowerShell script Logs collection:
• Collecting Replication Information NT6 / 2012r2
• Collecting Health and Topology Information NT6 / 2012r2
• Collecting Site, Site Link and Subnet Information NT6 / 2012r2

Splunk add-on for Microsoft Windows DNS PowerShell script Logs collection:
• DNS Zone Information Collection
• DNS Health Information Collection

PowerShell scripts included in the apps will get the above data.

View solution in original post

0 Karma

daniellim
Explorer

Splunk add-on for Microsoft active directory PowerShell script Logs collection:
• Collecting Replication Information NT6 / 2012r2
• Collecting Health and Topology Information NT6 / 2012r2
• Collecting Site, Site Link and Subnet Information NT6 / 2012r2

Splunk add-on for Microsoft Windows DNS PowerShell script Logs collection:
• DNS Zone Information Collection
• DNS Health Information Collection

PowerShell scripts included in the apps will get the above data.

0 Karma

adonio
Ultra Champion

hello there,

really depends on which TA but mainly Active Directory and Exchange data.
it helps populate some of the panels / dashboards in the app for windows infrastructure and app for exchange
anything in particular you are looking for?

0 Karma

daniellim
Explorer

its for the 2 apps below, which runs powershell scripts to index the data. Just curious that without those, what panels/dashboards would be missing, because of disabling powershell on windows server ?

splunk-add-on-for-microsoft-windows-dns_101
splunk-add-on-for-microsoft-active-directory_100

0 Karma

p_gurav
Champion

It used to collect AD data mostly.

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Announcing Modern Navigation: A New Era of Splunk User Experience

We are excited to introduce the Modern Navigation feature in the Splunk Platform, available to both cloud and ...

Modernize your Splunk Apps – Introducing Python 3.13 in Splunk

We are excited to announce that the upcoming releases of Splunk Enterprise 10.2.x and Splunk Cloud Platform ...

Step into “Hunt the Insider: An Splunk ES Premier Mystery” to catch a cybercriminal ...

After a whole week of being on call, you fell asleep on your keyboard, and you hit a sequence of buttons that ...