Hi, We already have Splunk 7.1.2 deployed in our environment and its collecting logs from all our domain controllers and parsing it. Since, AD related logs are already being gathered and stored in Splunk then what is the need of Splunk ADD-on for Active Directory. what special features it has than our regular log gathering process. Why should i deploy Splunk ADD-on for Active Directory in my environment when currently deployed Splunk is already doing the same job of collecting AD logs? ... View more