Splunk Cloud Platform

How to send data from Microsoft Windows AD to Splunk Cloud?

SplunkExplorer
Contributor

Hi Splunkers, I could have the following scenario to implement: a SplunkCloud platform that must receive data from some data sources, with at least an HF (but they could be 2 or more).

Between data sources, there are Windows Acive Directory servers and, of course, I have to send data to Splunk. I don't know if this data will be routeed to HF or directly to Splunk Cloud, but this is not important now.
The focal point is: it is very likely that we will not be able to install UF on those servers, for policy contraints. So, we will have to senda data from AD to Splunk in a agentless manner; what are the possible way to achieve this? And which ones could be the best ones?

Labels (2)
0 Karma
1 Solution

SplunkExplorer
Contributor

Solved by myself: Splunk is able to use WMI to achieve this result.

View solution in original post

0 Karma

SplunkExplorer
Contributor

Solved by myself: Splunk is able to use WMI to achieve this result.

0 Karma
Get Updates on the Splunk Community!

Announcing the Expansion of the Splunk Academic Alliance Program

The Splunk Community is more than just an online forum — it’s a network of passionate users, administrators, ...

Learn Splunk Insider Insights, Do More With Gen AI, & Find 20+ New Use Cases You Can ...

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

Buttercup Games: Further Dashboarding Techniques (Part 7)

This series of blogs assumes you have already completed the Splunk Enterprise Search Tutorial as it uses the ...