![]() Restart the Splunk services that run as that account on all hosts in your network once you change the password.Confirm that either the Splunk platform user password never expires, or that you must manually change the password before it expires, as defined by the password policy.If your AD domain security policy enforces password changes regularly, you must also do the following: Modify the access control lists of various AD objects, depending on the data sources you need to access.Add the user to various domain security groups.In most cases, configure the Splunk platform user account with least-permissive access to the data sources you want to collect. To get the data you want, you must provide an appropriate level of permission to this user. The user you tell the Splunk platform to run as determines the kind of data it can retrieve from remote machines. For more information, see Choose the Windows user Splunk Enterprise should run as in the Installation Manual. This choice has ramifications for both installation and data collection. When you install the Splunk platform, you can specify the Splunk platform to run as the Local System user or another user. Failure to understand how the Splunk platform interacts with Windows over the network can lead to suboptimal search results or no results at all. Windows requires authentication for remote operations. Using managed system accounts to access Windows data.When collecting remote Windows data over WMI, take into account the following considerations: For information on how the Splunk platform monitors AD, see Monitor Active Directory in this manual. ![]() See Considerations for getting data over WMI and Splunk forwarders versus WMI later in this topic.Īlso, while Active Directory (AD) monitoring does not use WMI, it has the same authentication considerations as data inputs that do use it. There are some caveats to this method of collection.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |