All Apps and Add-ons

MS AD Objects Lookups Not Correct

duneclarke2
Explorer

Hello, 

Have upgraded to MS AD Objects v 403 and I have been through the baseline wizard successfully to create the new lookups. But no matter what I do, the information is Not up to date even just having finished running the build for the kv's. 

This is the dashboard I am using to test AD Objects-Group-Group Member- Lookup

I am successful for admon data and baseline data. OK Admon Baseline Sync Data Available. The AD_Obj_Domain Lookup has data. 

Is there any way to troubleshoot this? Any help appreciated!

Labels (3)
0 Karma

duneclarke2
Explorer

Error Message in logs:

 

app="ms_windows_ad_objects" Found no results to append to collection 'AD_Obj_OU_LDAP_list_kv'

 

Does anyone know how to fix this? 

0 Karma

duneclarke2
Explorer

@shogan_splunk Hi Steve, any ideas here? Thanks for any help on any logs or troubleshooting we can do. Dune

0 Karma
Get Updates on the Splunk Community!

Fun with Regular Expression - multiples of nine

Fun with Regular Expression - multiples of nineThis challenge was first posted on Slack #regex channel ...

[Live Demo] Watch SOC transformation in action with the reimagined Splunk Enterprise ...

Overwhelmed SOC? Splunk ES Has Your Back Tool sprawl, alert fatigue, and endless context switching are making ...

What’s New & Next in Splunk SOAR

Security teams today are dealing with more alerts, more tools, and more pressure than ever.  Join us on ...