we are going to deploye splunk in our organizations but before deployement there are some Questions .
1 )if we will install splunk agent on Microsoft windows servers 2003/2008 Domain controllers , DHCP servers , DNS Servers , Application Servers and database servers(what will be the performance issue).
2) what types of privlages required to install splunk agent on all the above servers([domain Admin or services account etc.…])
3) if there will be any issue appeared what will be the roll back plan.
4) what about technical support.
5) Knowledge Base / Lesson learnt / Awareness from previous customers.
6) we already have Bit9 and MANDIANT in residing in DCs and are in production, please explore the possibilities of possible impact due to existing agents etc…
... View more