I can't seem to make the app work as well, nothing shows up on Domain or Forest, it returns with "no matching fields exist" on the first page even if I set time to "All time".
I followed all information from splunk docs on how to set it up, most if not all my configuration are default. I checked and compiled all necessary modules for Perl on my Splunk Indexer/Search head. as stated to no avail.
I am having same issue, I can see that events are coming in. I really cannot tell what I missed. Is there a way to verify or troubleshoot. form the 4 points you stated above I can tell that I have checked and verified them but no luck. I am using Windows 2008 x64 Standard for AD and CentOS 6.2 x64 on Splunk server.
Any input would be greatly appreciated.
thanks,
Where do we get this required list of Perl modules?
Your comments on Perl indicate you are using v1.0. Can you please re-test your situation with v1.1 of the app?
Thanks,