Security

How do we list the users within an ldap group?

ddrillic
Ultra Champion

We would like to produce a report which lists all the users who belong to a certain ldap group.

The following brings users -

| rest services/authentication/users | where roles="xxx" | table title, email, realname

We are not sure whether this call brings back what we want or rather all users of this ldap group who are currently logged in.

Any idea?

Tags (4)
0 Karma
1 Solution

joshd
Builder

The REST point you're calling represents all users and not just currently logged in users. Therefore what is returned should be representative of all users mapped into the given role whether they are system or LDAP user.

Always good to keep the REST URI Quick Reference link in your back pocket: http://docs.splunk.com/Documentation/Splunk/6.4.0/RESTREF/RESTlist

View solution in original post

joshd
Builder

The REST point you're calling represents all users and not just currently logged in users. Therefore what is returned should be representative of all users mapped into the given role whether they are system or LDAP user.

Always good to keep the REST URI Quick Reference link in your back pocket: http://docs.splunk.com/Documentation/Splunk/6.4.0/RESTREF/RESTlist

ddrillic
Ultra Champion

Perfect joshd. This is what I thought. Much appreciated.

0 Karma
Get Updates on the Splunk Community!

Registration for Splunk University is Now Open!

Are you ready for an adventure in learning?   Brace yourselves because Splunk University is back, and it's ...

Splunkbase | Splunk Dashboard Examples App for SimpleXML End of Life

The Splunk Dashboard Examples App for SimpleXML will reach end of support on Dec 19, 2024, after which no new ...

Understanding Generative AI Techniques and Their Application in Cybersecurity

Watch On-Demand Artificial intelligence is the talk of the town nowadays, with industries of all kinds ...