Splunk Enterprise Security
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
Ask a Question

Does Splunk_TA_microsoft_dns need to be deployed to every domain controller?

daniel333
Builder
‎08-24-2018 10:52 AM

All,

I am looking at Splunk_TA_microsoft_dns. We deployed it to every domain controller, but I was wondering if we really needed to do that. For things like the dns-zoneinfo.ps1 script, it seems we really only need this once per DNS server, not from every domain controller ever.

0 Karma
Reply
Get Updates on the Splunk Community!

Detecting Remote Code Executions With the Splunk Threat Research Team

WATCH NOWRemote code execution (RCE) vulnerabilities pose a significant risk to organizations. If exploited, ...

Enter the Splunk Community Dashboard Challenge for Your Chance to Win!

The Splunk Community Dashboard Challenge is underway! This is your chance to showcase your skills in creating ...

.conf24 | Session Scheduler is Live!!

.conf24 is happening June 11 - 14 in Las Vegas, and we are thrilled to announce that the conference catalog ...