https://community.splunk.com/t5/Security/User-account-dedup-doesn-t-work/m-p/238106#M13583 <P>It would be helpful to see the actual command.</P> Thu, 24 Nov 2016 17:43:37 GMT lguinn2 2016-11-24T17:43:37Z https://community.splunk.com/t5/Security/User-account-dedup-doesn-t-work/m-p/238105#M13582 <P>Why when i used dedup, in a search for a user account does it return no results. Where the exactly same search for an admin account works.</P> <P>It works for the users until i add the dedup into it. Very odd.</P> Thu, 24 Nov 2016 17:34:43 GMT https://community.splunk.com/t5/Security/User-account-dedup-doesn-t-work/m-p/238105#M13582 arrowecssupport 2016-11-24T17:34:43Z https://community.splunk.com/t5/Security/User-account-dedup-doesn-t-work/m-p/238106#M13583 <P>It would be helpful to see the actual command.</P> Thu, 24 Nov 2016 17:43:37 GMT https://community.splunk.com/t5/Security/User-account-dedup-doesn-t-work/m-p/238106#M13583 lguinn2 2016-11-24T17:43:37Z https://community.splunk.com/t5/Security/User-account-dedup-doesn-t-work/m-p/238107#M13584 <P>It appeared that in my dedup i was using a "tag" that the user group didn't have permissions to view.</P> Mon, 28 Nov 2016 11:23:46 GMT https://community.splunk.com/t5/Security/User-account-dedup-doesn-t-work/m-p/238107#M13584 arrowecssupport 2016-11-28T11:23:46Z https://community.splunk.com/t5/Security/User-account-dedup-doesn-t-work/m-p/238108#M13585 <P>Hi thanks for the response. I fixed it an posted my own answer below. </P> Mon, 28 Nov 2016 11:24:16 GMT https://community.splunk.com/t5/Security/User-account-dedup-doesn-t-work/m-p/238108#M13585 arrowecssupport 2016-11-28T11:24:16Z