Hi Team,
A former team configured the add-on for Active Directory and it has not been working for at least a few months now. The dashboards now display below error or "search auto-canceled".
External search command 'ldapsearch' returned error code 1. Script output = "error_message=socket connection error while opening: [Errno 111] Connection refused ".
Can you explain what this error means and what we can try to resolve it?
Thanks,
Mark.
The server side (e.g. your corporate dmz/internet firewall) is blocking the inbound connection from Splunk Cloud to your LDAP server.