All Apps and Add-ons

The SA-ldapsearch - Splunk Supporting Add-on for Active Directory does not show all users in the domain admins group.

sheaross
Explorer

I'm trying to create a report/dashboard that will show all users in the domain admins group, the query below does work and will create a report but the report is also missing users inside of the domain admins group. The users that are missing have their primary group set to domain admins.(This could be the issue) or a bug that inside of the Splunk Supporting Add-on for Active Directory. Any ideas?

| ldapsearch domain="domain" search="(&(objectclass=group)(cn=Domain Admins))"|fields *
| ldapgroup
| table member_name,member_type,member_dn
| sort member_name
| rename member_name as "Username",member_type as "Membership Type"
| search (Username !="" OR member_domain !="" OR Domain !="")

0 Karma
Get Updates on the Splunk Community!

Why You Can't Miss .conf25: Unleashing the Power of Agentic AI with Splunk & Cisco

The Defining Technology Movement of Our Lifetime The advent of agentic AI is arguably the defining technology ...

Deep Dive into Federated Analytics: Unlocking the Full Power of Your Security Data

In today’s complex digital landscape, security teams face increasing pressure to protect sprawling data across ...

Your summer travels continue with new course releases

Summer in the Northern hemisphere is in full swing, and is often a time to travel and explore. If your summer ...