David Day
- Total activity 14
- Last activity
- Member since
- Following 0 users
- Followed by 0 users
- Votes 1
- Subscriptions 4
Activity overview
Latest activity by David Day-
David Day commented,
Figured it out. My initial list of attributes was: member; memberof That pulled the members (member) of groups but not the groups that users were in (memberof), so I tried: member; memberOf Again,...
-
David Day commented,
I am now receiving the member attribute under Groups, however, I am still not seeing the memberof attribute under users. I tried both memberof, and memberOf in the attribute list. Again, this is...
-
David Day commented,
I have added the member attribute for groups and the memberof attribute for users to get this information but according to the Sumo documentation the Security Groups to which the employee is assign...
-
David Day created a post,
Active Directory Users and the Groups the are Members of?
I setup the new Windows Active Directory Source and am pulling the Active Directory data into Sumo. We have built some nice queries to pull users, groups, etc. from the AD schema. However we are ...
-
David Day commented,
I performed a test yesterday in an attempt to pull Windows Event logs from non-domain joined systems located in our DMZ. This was a test in order to not have to use the specific machine name in th...
-
David Day created a post,
Windows Event Logs on standalone server
I have several servers in a DMZ that are not part of a domain. Domain is a required field for the Windows Event Log source for remote capture. Is there a way around using a domain name? Thanks.
-
David Day commented,
I really like this query, even better than the one I found that did a count of the logs with a time difference. What would be great is if there would be a way to also include the count of logs. T...
-
David Day commented,
Graham, Thanks. That was exactly what I was looking for.
-
David Day created a post,
List of unique sourceHosts in a sourceCategory
I am trying to get a list of IP addresses that are reporting to a particular sourceCategory. I have tried several options and the best I can come up with is: _sourceCategory=prod/network| count_f...