Solution to get Account actually looked out in AD

Elastic Stack Logstash
1

Hello,

i'm student and for my final test i need to implemant elk (elastic, kibana, logstash, winlogbeat )
And i want to get all accounts who are curently looked out.
I things the solution is a script on AD to get this info and send it to logstash but i would to know if is the only or best solution.

Thx for help

2

The only application who knows who is locked out is the AD server it self.
Options:

  1. Create a script that queries the AD and filters on the account status and send that over.
  2. You create a ldif from the AD and load that via logstash into elasticsearch.

I would go with the first option..

3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.