I am a new user of Sumo Logic and even though I have started scratching the surface a bit it will take some time for me to get to some comfortable level to run queries. They seem to complicated to me at this time.
Anyway, I have some simple use cases that I need some help with for auditing purposes.
Use case 1: Currently we run powershell scripts on a ad-hoc basis to get information such as a list of all AD Domain Admin users, Enterprise Admins and Schema Admins. Can someone help me with this? Once I have these queries I can then schedule them on a monthly/ quarterly basis and do not have to use powershell scripts anymore.
Use case 2: I would like to create a report/generate a list of all active directory users and include some AD attributes such as employee manager, employee job title, employee descriptions etc.. basically the most common AD attributes. We would like to add for example under the description attribute the text of "Consultant" for Consultant employees. By doing this then I can run a report on a schedule and identify
a) all current consultant employees
b) all consultant employees that were created the past month
Apologies if this has been asked before but was not able to find something on the search.
Please sign in to leave a comment.