page_title: Su-log-2013-09-09 page_touched: 20130923154620 old_text: ===Monday=== * Splunk * LDAP Discover problem with ACLs on directory4 and directory5 Reload directory4 and directory5

===Tuesday=== * splunk - need to package addons and make sure files also get copied to deployment_apps logsh-dev:/opt/splunk/etc/apps/Splunk_for_ActiveDirectory/appserver/addons# cp -r *NT6 /opt/splunk/etc/deployment-apps/ logsh-dev:/opt/splunk/etc/apps# cp -r Splunk_TA_windows ../deployment-apps/ SA-ldapsearch - search head and indexer Splunk_TA_windows - search head and indexer ** Splunk_for_ActiveDirectory - search head and indexer, requires jre 1.7 or later

     # Windows DNS Servers (example)
     [serverClass:windns_forwarder]
     whitelist.0 = foobar.com
     blacklist.0 = *
     restartSplunkd = true
     [serverClass:windns_forwarder:app:Splunk_TA_Windows]
     [serverClass:windns_forwarder:app:TA-DNSServer-NT6]

     # Windows Domain Controllers
     [serverClass:windomain_controllers_forwarder]
     whitelist.0 = other.foobar.com
     blacklist.0 = *
     restartSplunkd = true
     [serverClass:windomain_controllers_forwarder:app:Splunk_TA_Windows]
     [serverClass:windomain_controllers_forwarder:app:TA-DomainController-NT6]

SUDailyLogs 278. row