Hello dear splunkers.
I'm facing an issue with the ldapfilters. It doesn't return anything when launched in fast mode. Smart and verbose mode work fine however.
The real problem here is that I want to use it within scheduled alerts or reports. And those searches are natively in fast mode. I couldn't find a way to change it.
Did someone face the same issue ? How can I deal with it ?
Thanks in advance.
Well the command ldapsearch seems to work fine in fast mode and returns the things I want.