All Apps and Add-ons

MS Windows AD Objects: What are the reasons for failure of Builds for v 3.1.1?

jcooperFossil
Path Finder

Running the auto builds I get these errors. Anyone know where I can find the cause / error message associated with the failures?

Build AD Domain Selector ...
- Built. (took 6.04s)
Build AD User Lookup ...
- Built. (took 2341.72s)
WARNING: Build AD User Lookup could not be built.
Update AD User - Group Membership ...
Build AD Group Lookup ...
- Built. (took 0.03s)
WARNING: Update AD User - Group Membership could not be built.
Build AD Computer Lookup ...
Update AD Group - Group Membership ...
- Built. (took 0.03s)
WARNING: Update AD Group - Group Membership could not be built.
Build AD DL Group Lookup ...
Update AD Computer - Group Membership ...
- Built. (took 0.00s)
WARNING: Update AD Computer - Group Membership could not be built.
Build AD GPO Lookup ...
Build AD OU Lookup ...
- Built. (took 20.44s)
Build AD Admin Audit Lookup ...
- Built. (took 149.31s)
Build AD UAC Details Lookup ...
- Built. (took 9.08s)
- Built. (took 287.16s)

0 Karma
1 Solution

jcooperFossil
Path Finder

Ran the searches individually, eventually one came back with an error that the search was out of memory. Had Splunk Cloud support increase the amount of RAM from 4GB to 5GB in limits.conf, restarted the SH, and all works well.

View solution in original post

0 Karma

jcooperFossil
Path Finder

Ran the searches individually, eventually one came back with an error that the search was out of memory. Had Splunk Cloud support increase the amount of RAM from 4GB to 5GB in limits.conf, restarted the SH, and all works well.

0 Karma
Get Updates on the Splunk Community!

Splunk Enterprise Security 8.0.2 Availability: On cloud and On-premise!

A few months ago, we released Splunk Enterprise Security 8.0 for our cloud customers. Today, we are excited to ...

Logs to Metrics

Logs and Metrics Logs are generally unstructured text or structured events emitted by applications and written ...

Developer Spotlight with Paul Stout

Welcome to our very first developer spotlight release series where we'll feature some awesome Splunk ...