All Apps and Add-ons

Splunk App for Windows Infrastructure: How to get past "Checking Data" errors during setup without Domain Controller access?

renopaul
Explorer

While going through the first time setup of this application I’ve ran into many roadblocks. We are simply attempting to see if this solution is going to be a value add in our environment. First issue is that this application needs to have the Add-on for Microsoft Windows Active Directory installed, got that done. Now while during the “Checking Data” I get errors with no sourcetype of “MSAD” and “ActiveDirectory”. There is a different department that manages the Domain and will not be participating in this experiment. How do I generate dummy data to get past this error so that I can continue to evaluate this product without touching the enterprises domain controllers?

0 Karma
1 Solution

malmoore
Splunk Employee
Splunk Employee

Hi,

The problem you currently experience is a bug that we have resources actively working on. In the meantime, there are some workarounds to getting past the data check.

View solution in original post

0 Karma

malmoore
Splunk Employee
Splunk Employee

Hi,

The problem you currently experience is a bug that we have resources actively working on. In the meantime, there are some workarounds to getting past the data check.

0 Karma
Get Updates on the Splunk Community!

Stay Connected: Your Guide to May Tech Talks, Office Hours, and Webinars!

Take a look below to explore our upcoming Community Office Hours, Tech Talks, and Webinars this month. This ...

They're back! Join the SplunkTrust and MVP at .conf24

With our highly anticipated annual conference, .conf, comes the fez-wearers you can trust! The SplunkTrust, as ...

Enterprise Security Content Update (ESCU) | New Releases

Last month, the Splunk Threat Research Team had two releases of new security content via the Enterprise ...