splunk
Splunk Supporting Add-on for Active Directory
Splunk Cloud
Splunk Built
Overview
Details
This app (also known as SA-ldapsearch) provides support functions to the Content Pack for Windows Dashboards and Reports (https://docs.splunk.com/Documentation/CPWindowsDash/latest/CP/About), Content Pack for Microsoft Exchange (https://docs.splunk.com/Documentation/CPExchange/latest/CP/About) that enable you to extract information from an Active Directory database. For instance, you can search Active Directory for records, presenting the records as events, or augment existing events with information from Active Directory based on information within the events.
To learn about the Splunk Supporting Add-on for Active Directory, see the official documentation here on docs.splunk.com.
For information on what has been fixed as well as known issues, see the release notes.
Release Notes
Version 3.1.0
Aug. 13, 2024
Version 3.0.8
Sept. 6, 2023