Hi All,
Can I add users to Splunk using Active Directory groups ?
Or do I have to add them manually one by one ?
Thanks
Anshuman Jain
Absolutely!
Check out our documentation here:
http://docs.splunk.com/Documentation/Splunk/latest/Security/SetupuserauthenticationwithLDAP
Here is a link to the specific page of documentation that explains how to assign LDAP (or AD) groups to Splunk roles: http://docs.splunk.com/Documentation/Splunk/latest/Security/ConfigureLDAPwithSplunkWeb#Map_LDAP_grou...
Active Directory's LDAP service works nearly the same as other LDAP services, so you can basically substitute AD LDAP in the documentation where "LDAP" appears. Usually the hardest part of enabling AD authentication with Splunk is getting cooperation from your organization's AD Enterprise Admins. 🙂