Active Directory App issue with dashboards

[dchodur]

I am seeing the following message on some of my AD App dashboards in different areas.
The job appears to have expired or has been canceled. Splunk could not retrieve data for this search.

One such place is the Security, User Logon Failures, all items to the right side. The charts on the left all work. In other dashboards parts work as well but others see this message.

I pieced out all the search strings from one of the dashboards (the security, user logon failures), macros, etc to verify all the data was there and such. It was and if I run this search string pieced together in a normal search filed it works. Makes me think there is something else going on that I am running into, like a compatibility issue or bug.

Anyone else seen or had this issue? Know of a fix.

Thanks

[dchodur · Accepted solution]

I figured out my issue, I have this loaded on a Linux system are did not really want to load the TA for Windows on it. Yes- according to the directions and the popup you really do need this installed for the app to work correctly. Installed and and now those dashboards work fine.