What Domain Controller is SA-ldapsearch using?


How can I identify exactly which Domain Controller SA-ldapsearch is using to pull its data?

I know I can configure ldap.conf with a list of servers, but where in the logs can I identify exactly which one it is going to?


0 Karma

Splunk Employee
Splunk Employee

You can only find out the list of hosts that is being used - not the exact one. This is because of the underlying library we use. We tell it to use the list of hosts and it picks one (based on the speed of connection).

0 Karma
Don’t Miss Global Splunk
User Groups Week!

Free LIVE events worldwide 2/8-2/12
Connect, learn, and collect rad prizes
and swag!