Security

What Domain Controller is SA-ldapsearch using?

JWBailey
Communicator

How can I identify exactly which Domain Controller SA-ldapsearch is using to pull its data?

I know I can configure ldap.conf with a list of servers, but where in the logs can I identify exactly which one it is going to?

Thanks.

0 Karma

ahall_splunk
Splunk Employee
Splunk Employee

You can only find out the list of hosts that is being used - not the exact one. This is because of the underlying library we use. We tell it to use the list of hosts and it picks one (based on the speed of connection).

0 Karma
Get Updates on the Splunk Community!

Splunk Mobile: Your Brand-New Home Screen

Meet Your New Mobile Hub  Hello Splunk Community!  Staying connected to your data—no matter where you are—is ...

Introducing Value Insights (Beta): Understand the Business Impact your organization ...

Real progress on your strategic priorities starts with knowing the business outcomes your teams are delivering ...

Enterprise Security (ES) Essentials 8.3 is Now GA — Smarter Detections, Faster ...

As of today, Enterprise Security (ES) Essentials 8.3 is now generally available, helping SOC teams simplify ...