Enterprise organisations understand that Microsoft Windows Server Active Directory is the foundation of an IT infrastructure. It is the central location for user configuration information, authentication requests, and information about all the computers that run the business. When issues occur in Active Directory, the impact is felt across the business – users are unable to login, access privileges expire, email stops flowing, and systems stall. The Splunk App for Active Directory is an easy-to-deploy, proactive solution that uncovers the data needed to diagnose the issue, fix its root cause, and restore service.
“When there is a problem, we need to resolve it fast to keep the business running,” said Eric Holtzclaw, senior systems administrator, Riverbed Technology. “The Splunk App for Active Directory provides us with core monitoring and auditing information in one view. This centralised viewpoint helps us better manage our infrastructure by enabling us to resolve our issue in the shortest time possible.”
“The Splunk App for Active Directory makes it possible for administrators to avoid the problems of traditional tools that simply deliver health statistics, but miss reporting crucial compliance and auditing information,” said Scott Crawford, managing research director, Enterprise Management Associates. “Identifying security breaches and ensuring corporate compliance goals are top concerns of organisations today. The app provides real-time operational health and performance data on the infrastructure, integrated auditing features that track activity from root domains to the individual objects in an Active Directory environment, and extensive change management reports that deliver views to changes in objects and policies templates, increasing uptime.”
With the Splunk App for Active Directory users can:
• • Monitor the Active Directory Forest for potential security breaches and non-compliant usage patterns.
• • Audit changes to group policies, user, group, and computer objects in real time.
• • View detailed topology statistics on all the objects within the Active Directory – top down from the Forest to individual user and computer accounts.
• • Assess the operational health of Active Directory across site and domain boundaries.
“What makes the Splunk App for Active Directory so unique is the power it gives administrators who can now gain real-time operational intelligence on the entire Active Directory infrastructure,” said Manish Kalra, director of product marketing, Splunk. “Armed with deep insight from the data that is captured from security, system, and audit logs, performance monitors and active service monitors, Active Directory administrators are able to quickly pinpoint problems, identify security breaches, and ensure corporate compliance goals.”