Splunk Enterprise Security
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
Ask a Question

Does Splunk_TA_microsoft_dns need to be deployed to every domain controller?

daniel333
Builder
‎08-24-2018 10:52 AM

All,

I am looking at Splunk_TA_microsoft_dns. We deployed it to every domain controller, but I was wondering if we really needed to do that. For things like the dns-zoneinfo.ps1 script, it seems we really only need this once per DNS server, not from every domain controller ever.

0 Karma
Reply
Did you miss .conf21 Virtual?

Good news! The event's keynotes and many of its breakout sessions are now available online, and still totally FREE!

Get Updates on the Splunk Community!