Alerting

ldapfilters command doesn't work in fast mode

pokix
New Member

Hello dear splunkers.

I'm facing an issue with the ldapfilters. It doesn't return anything when launched in fast mode. Smart and verbose mode work fine however.

The real problem here is that I want to use it within scheduled alerts or reports. And those searches are natively in fast mode. I couldn't find a way to change it.

Did someone face the same issue ? How can I deal with it ?

Thanks in advance.

Kind regards

Tags (2)
0 Karma

pokix
New Member

Well the command ldapsearch seems to work fine in fast mode and returns the things I want.

0 Karma
Get Updates on the Splunk Community!

Take Your Breath Away with Splunk Risk-Based Alerting (RBA)

WATCH NOW!The Splunk Guide to Risk-Based Alerting is here to empower your SOC like never before. Join Haylee ...

Industry Solutions for Supply Chain and OT, Amazon Use Cases, Plus More New Articles ...

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

Enterprise Security Content Update (ESCU) | New Releases

In November, the Splunk Threat Research Team had one release of new security content via the Enterprise ...