Splunk Dev

domain_aliases.csv and active_directory.csv

nazt
Explorer

In the deployment manual, it mention that to edit the above files to configure the lookups. However, I cant find the file.

Actually, I cant find the %SPLUNK_HOME%\etc\apps\Splunk_for_Exchange\local\ mentioned in the manual.

Where can I find those? All of the users are @unknown now =/

0 Karma

ahall_splunk
Splunk Employee
Splunk Employee

The local directory does not exist by default. Just create it and place the two files according to the documentation in that directory.

0 Karma

nycrober
New Member

I have the same issue, the local directory does not exist only appserver, bin, default, lookups and metadata folder

0 Karma

nazt
Explorer

Yeah, I did install, but the local directory does not exist.

All I have is appserver, bin, default, lookups and metadata folder.

0 Karma

cphair
Builder

Have you actually installed the Splunk for Exchange App? If so, that directory should be on your main indexer or search head--browse to whatever directory you installed Splunk in, then go to the subdirectory etc\apps\Splunk_for_Exchange\local.

0 Karma
Get Updates on the Splunk Community!

Application management with Targeted Application Install for Victoria Experience

  Experience a new era of flexibility in managing your Splunk Cloud Platform apps! With Targeted Application ...

Index This | What goes up and never comes down?

January 2026 Edition  Hayyy Splunk Education Enthusiasts and the Eternally Curious!   We’re back with this ...

Splunkers, Pack Your Bags: Why Cisco Live EMEA is Your Next Big Destination

The Power of Two: Splunk + Cisco at "Ludicrous Scale"   You know Splunk. You know Cisco. But have you seen ...