All Apps and Add-ons

MS Windows AD Objects: "Warning - No ActiveDirectory baseline (Sync) Object data found."

richardphung
Communicator

I have followed the steps outlined here:
https://answers.splunk.com/answers/457116/ms-windows-ad-objects-how-to-troubleshoot-warning.html

With no luck.

Under Build AD Lookup Lists - Main >
Verify admon Object data:
WARNING!! - No ActiveDirectory baseline (Sync) Object data found. Verify the Deployment Steps outlined in the MS-Windows-AD-Objects Overview dashboard, specifically Deployment Steps 2 and 3.

under:
AD Objects - Verify Baseline Data - Overall

I get:
ObjectType Total Unique Objects Last Received Event Time Verify Collection and Completion
Domains 1 05/29/19 04:13:38 Baseline Collection Completed (22114 Minutes Ago)

0 Karma

richardphung
Communicator

Apparently, all I needed was a little more time.
About 20 minutes later, I get:

Verify admon
Object data:
SUCCESS - Found ActiveDirectory(admon) baseline (Sync) Object Data
View:
admon Verify Search

ObjectType Total Unique Objects Last Received Event Time Verify Collection and Completion
User 14332 06/13/19 12:52:51 Baseline Collection Completed (17 Minutes Ago)
Computer 2389 06/13/19 12:52:51 Baseline Collection Completed (17 Minutes Ago)
Group 1079 06/13/19 12:51:50 Baseline Collection Completed (18 Minutes Ago)
Organization Units 123 06/13/19 12:45:19 Baseline Collection Completed (25 Minutes Ago)
Group Policies 92 06/13/19 12:45:19 Baseline Collection Completed (25 Minutes Ago)
Containers 23 06/13/19 12:44:15 Baseline Collection Completed (26 Minutes Ago)
Domains 1 06/13/19 12:52:06 Baseline Collection Completed (18 Minutes Ago)

0 Karma
Get Updates on the Splunk Community!

OpenTelemetry for Legacy Apps? Yes, You Can!

This article is a follow-up to my previous article posted on the OpenTelemetry Blog, "Your Critical Legacy App ...

UCC Framework: Discover Developer Toolkit for Building Technology Add-ons

The Next-Gen Toolkit for Splunk Technology Add-on Development The Universal Configuration Console (UCC) ...

.conf25 Community Recap

Hello Splunkers, And just like that, .conf25 is in the books! What an incredible few days — full of learning, ...