https://community.splunk.com/t5/All-Apps-and-Add-ons/Splunk-app-for-AD-no-data/m-p/146381#M12935 <P>I have Splunk Ent. 5.0.5 with the same version forwarders on four (4) domain controllers.</P> <P>I'm running no firewalls internally, the forwarders are configured to push data to "splunk" which is the hostname for my inhouse splunk server.</P> <P>However, I am not seeing ANYTHING pop up in the AD app.</P> <P>I looked through the 10 common causes writeup and none of them apply to me. Splunk just acts like it isn't getting the data.</P> <P>I did at the TA_Windows/DNS/Domain Controller folders into the local splunkuniversalforwarder folders.</P> <P>What might be the problem? I can't get support to answer me, unfortunately.</P> Mon, 18 Nov 2013 15:37:09 GMT simbasim 2013-11-18T15:37:09Z https://community.splunk.com/t5/All-Apps-and-Add-ons/Splunk-app-for-AD-no-data/m-p/146381#M12935 <P>I have Splunk Ent. 5.0.5 with the same version forwarders on four (4) domain controllers.</P> <P>I'm running no firewalls internally, the forwarders are configured to push data to "splunk" which is the hostname for my inhouse splunk server.</P> <P>However, I am not seeing ANYTHING pop up in the AD app.</P> <P>I looked through the 10 common causes writeup and none of them apply to me. Splunk just acts like it isn't getting the data.</P> <P>I did at the TA_Windows/DNS/Domain Controller folders into the local splunkuniversalforwarder folders.</P> <P>What might be the problem? I can't get support to answer me, unfortunately.</P> Mon, 18 Nov 2013 15:37:09 GMT https://community.splunk.com/t5/All-Apps-and-Add-ons/Splunk-app-for-AD-no-data/m-p/146381#M12935 simbasim 2013-11-18T15:37:09Z https://community.splunk.com/t5/All-Apps-and-Add-ons/Splunk-app-for-AD-no-data/m-p/146382#M12936 <P>Hello.<BR /> More often than not, you will need to make sure the data is actually flowing in. Doing a quick "host=<YOURSERVERNAME>" where <YOURSERVERNAME> is one of your servers, will show what is actually getting forwarded into Splunk. If nothing is coming in, the problem resides on the forwarder. Also, as in the 10 most common issues, verifying each of those will help you isolate the problem.</YOURSERVERNAME></YOURSERVERNAME></P> Mon, 18 Nov 2013 17:45:17 GMT https://community.splunk.com/t5/All-Apps-and-Add-ons/Splunk-app-for-AD-no-data/m-p/146382#M12936 jbernt_splunk 2013-11-18T17:45:17Z