All Apps and Add-ons

Splunk App for Windows Infrastructure: How to get past "Checking Data" errors during setup without Domain Controller access?

renopaul
Explorer

While going through the first time setup of this application I’ve ran into many roadblocks. We are simply attempting to see if this solution is going to be a value add in our environment. First issue is that this application needs to have the Add-on for Microsoft Windows Active Directory installed, got that done. Now while during the “Checking Data” I get errors with no sourcetype of “MSAD” and “ActiveDirectory”. There is a different department that manages the Domain and will not be participating in this experiment. How do I generate dummy data to get past this error so that I can continue to evaluate this product without touching the enterprises domain controllers?

0 Karma
1 Solution

malmoore
Splunk Employee
Splunk Employee

Hi,

The problem you currently experience is a bug that we have resources actively working on. In the meantime, there are some workarounds to getting past the data check.

View solution in original post

0 Karma

malmoore
Splunk Employee
Splunk Employee

Hi,

The problem you currently experience is a bug that we have resources actively working on. In the meantime, there are some workarounds to getting past the data check.

0 Karma
Get Updates on the Splunk Community!

[Puzzles] Solve, Learn, Repeat: Dynamic formatting from XML events

This challenge was first posted on Slack #puzzles channelFor a previous puzzle, I needed a set of fixed-length ...

Enter the Agentic Era with Splunk AI Assistant for SPL 1.4

  🚀 Your data just got a serious AI upgrade — are you ready? Say hello to the Agentic Era with the ...

Stronger Security with Federated Search for S3, GCP SQL & Australian Threat ...

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...