MS Windows AD Objects

Provides a solution for building and dynamically updating Splunk AD Object Lookups with User, Group, Computer, OU, and Group Policy Active Directory object data. These lookups can then be used for quickly analyzing the latest AD attribute values and correlate with Windows Events or any other indexed data. There are over 40 dashboards/50 reports provided, including numerous ones that can help you build your own. This application also provides an efficient, alternative, option for looking up AD Object attributes instead of using the Support Add-On for Active Directory (ie remote LDAP Queries). Since the the Splunk for Windows Infrastructure and Splunk for Microsoft Exchange applications require the SA LDAPSearch add-on by default, the MS Windows AD Objects application provides the needed dashboard files to replace the ones provided within these applications.