Monitor Active Directory

mpopyk · ‎08-18-2016

Hello,

We are testing splunk light on a linux Ubuntu 14.04 machine. I was curious if you can monitor Active Directory with Splunk light or is that an enterprise feature?

Thanks

rbittner_splunk · ‎08-18-2016

Yes you can monitor AD with SL. The Windows add-on can help with that.

mpopyk · ‎08-18-2016

Thanks for the response but i looked at the documentation for the add-on and it looks like it will only monitor certain information, nothing about AD.

http://docs.splunk.com/Documentation/WindowsAddOn/latest/User/AbouttheSplunkAdd-onforWindows

I also found this document on how to configure it from the command line but our version of splunk doesn't have a admon.conf file.

http://docs.splunk.com/Documentation/Splunk/5.0/Data/AuditActiveDirectory

Monitor Active Directory

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Announcing Modern Navigation: A New Era of Splunk User Experience

Modernize your Splunk Apps – Introducing Python 3.13 in Splunk

Step into “Hunt the Insider: An Splunk ES Premier Mystery” to catch a cybercriminal ...

Join the Conversation

Monitor Active Directory

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Announcing Modern Navigation: A New Era of Splunk User Experience

Modernize your Splunk Apps – Introducing Python 3.13 in Splunk

Step into “Hunt the Insider: An Splunk ES Premier Mystery” to catch a cybercriminal ...