Are you a member of the Splunk Community?
- Find Answers
- :
- Apps & Add-ons
- :
- All Apps and Add-ons
- :
- What data does the powershell scripts in microsoft...
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark Topic
- Subscribe to Topic
- Mute Topic
- Printer Friendly Page
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
I would like to know what data does the powershell scripts in the various microsoft windows add-ons collect?
What data will I not be able to collect, if i disable powershell scripts?
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Splunk add-on for Microsoft active directory PowerShell script Logs collection:
• Collecting Replication Information NT6 / 2012r2
• Collecting Health and Topology Information NT6 / 2012r2
• Collecting Site, Site Link and Subnet Information NT6 / 2012r2
Splunk add-on for Microsoft Windows DNS PowerShell script Logs collection:
• DNS Zone Information Collection
• DNS Health Information Collection
PowerShell scripts included in the apps will get the above data.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Splunk add-on for Microsoft active directory PowerShell script Logs collection:
• Collecting Replication Information NT6 / 2012r2
• Collecting Health and Topology Information NT6 / 2012r2
• Collecting Site, Site Link and Subnet Information NT6 / 2012r2
Splunk add-on for Microsoft Windows DNS PowerShell script Logs collection:
• DNS Zone Information Collection
• DNS Health Information Collection
PowerShell scripts included in the apps will get the above data.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
hello there,
really depends on which TA but mainly Active Directory and Exchange data.
it helps populate some of the panels / dashboards in the app for windows infrastructure and app for exchange
anything in particular you are looking for?
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
its for the 2 apps below, which runs powershell scripts to index the data. Just curious that without those, what panels/dashboards would be missing, because of disabling powershell on windows server ?
splunk-add-on-for-microsoft-windows-dns_101
splunk-add-on-for-microsoft-active-directory_100
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
It used to collect AD data mostly.
Take Action Automatically on Splunk Alerts with Red Hat Ansible Automation Platform
Calling All Security Pros: Ready to Race Through Boston?
Beyond Detection: How Splunk and Cisco Integrated Security Platforms Transform ...
