Splunk Search

Splunk Support for Active Directory: How to get results for multiple ldap host after running |ldaptestconnection command

splunk_rohitsha
Engager

Splunk Support for Active Directory: How to get results for multiple ldap host

| ldaptestconnection domain="my Domain"

shows a single event, I have multiple hosts servicing as a LDAP server, Why its only showing 1 host details as I have multiple hosts in a single domain servicing as LDAP servers.

I am getting the following event.

18/12/2019
04:44:32.900

{ [-]
distinguishedName: DC=,DC= ,DC=*
}
Show as raw text
host = hostname.MyDomain.corp

Do i have create separate Entries to get the test connection details for other LDAP server in the same domain?

Tags (1)
0 Karma
Get Updates on the Splunk Community!

Get Your Exclusive Splunk Certified Cybersecurity Defense Engineer at Splunk .conf24 ...

We’re excited to announce a new Splunk certification exam being released at .conf24! If you’re headed to Vegas ...

Share Your Ideas & Meet the Lantern team at .Conf! Plus All of This Month’s New ...

Splunk Lantern is Splunk’s customer success center that provides advice from Splunk experts on valuable data ...

Combine Multiline Logs into a Single Event with SOCK: a Step-by-Step Guide for ...

Combine multiline logs into a single event with SOCK - a step-by-step guide for newbies Olga Malita The ...