Hi Team,
In my implementation splunk is integrated with LDAP authentication, users who left the organizations will be removed from the LDAP group as part of exit process form is submitted to LDAP group.
question is how do we get to know of that exited user in splunk so that we can do the clean up on splunk end(backing up/re-assigning/deleting his users directory) , especially those users who did not have any splunk artifacts (i.e. they were just looking up dashboards etc hence will not be listed as part of orphaned searches or objects).
Looking forward to you inputs.
Thank you!
↧