Splunk Search

The LDAP connector in splunk is generating a ton of successful logins.

rmontoya746
New Member

The ldap connector that is used to map AD groups is generating a ton of events, is there a way to stop that?

Ive tried to edit the authentication conf to cache the groups/users but still it is connection to LDAP almost every second.

Tags (1)
0 Karma
Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

In November, the Splunk Threat Research Team had one release of new security content via the Enterprise ...

Index This | Divide 100 by half. What do you get?

November 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with this ...

Stay Connected: Your Guide to December Tech Talks, Office Hours, and Webinars!

❄️ Celebrate the season with our December lineup of Community Office Hours, Tech Talks, and Webinars! ...