...bjectSid.
I looked at the documentation for both ldapfilter and ldapsearch but still did not make sense to me and the document that said RFC 2254 for the search command said it was created back i...
...efault" basedn="..." search="(msExchMailboxGuid=$conv$)" attrs="name"
-> the result is empty.
In theldapfilter, if I replace "$conv$" with "\\68\\c7\\09\\74\\1b\\ed\\dd\\45\\8d\\5...
Hello dear splunkers.
I'm facing an issue with theldapfilters. It doesn't return anything when launched in fast mode. Smart and verbose mode work fine however.
The real problem here is that I...
Hi,
Can the "sendemail" command be used to send multiple emails based on receiver information in the search result? So if I have a result with 10 events and each event contains an email address, I...
...bjectSid.
I looked at the documentation for both ldapfilter and ldapsearch but still did not make sense to me and the document that said RFC 2254 for the search command said it was created back in 1...
Hi, I am creating a query to identify users connected to our Exchange on-prem servers using Microsoft Modern Authentication. So far I managed to get the user SID and using ldapfiltercommand I o...
...s that this search always returns "no results". If I omit the "fields" and "collect" commands it returns results as intended. Also if I omit the "ldapfilter" command it works just fine. Do you have a...
...hat I am using: | ldapfilter domain=default search="(userPrincipalName=$user$)" attrs="cn,userPrincipalName" The above SPL works, however the problem I have is that Im not sure how to combine the...
...emove "obj_dn" from the table command I get no results at all? I'm using ldapfilter here to get the cn of an object using the obj_dn field, but I didn't think I needed it anymore after that &n...