All Apps and Add-ons

Splunk App for Windows Infrastructure: How to get past "Checking Data" errors during setup without Domain Controller access?

renopaul
Explorer

While going through the first time setup of this application I’ve ran into many roadblocks. We are simply attempting to see if this solution is going to be a value add in our environment. First issue is that this application needs to have the Add-on for Microsoft Windows Active Directory installed, got that done. Now while during the “Checking Data” I get errors with no sourcetype of “MSAD” and “ActiveDirectory”. There is a different department that manages the Domain and will not be participating in this experiment. How do I generate dummy data to get past this error so that I can continue to evaluate this product without touching the enterprises domain controllers?

0 Karma
1 Solution

malmoore
Splunk Employee
Splunk Employee

Hi,

The problem you currently experience is a bug that we have resources actively working on. In the meantime, there are some workarounds to getting past the data check.

View solution in original post

0 Karma

malmoore
Splunk Employee
Splunk Employee

Hi,

The problem you currently experience is a bug that we have resources actively working on. In the meantime, there are some workarounds to getting past the data check.

0 Karma
Get Updates on the Splunk Community!

Technical Workshop Series: Splunk Data Management and SPL2 | Register here!

Hey, Splunk Community! Ready to take your data management skills to the next level? Join us for a 3-part ...

Spotting Financial Fraud in the Haystack: A Guide to Behavioral Analytics with Splunk

In today's digital financial ecosystem, security teams face an unprecedented challenge. The sheer volume of ...

Solve Problems Faster with New, Smarter AI and Integrations in Splunk Observability

Solve Problems Faster with New, Smarter AI and Integrations in Splunk Observability As businesses scale ...