Splunk app for Windows Infrastructure: Unknown search command 'ldapsearch'.

[jwadmin]

Does anyone know why I am getting this error on some of the dashboards on the Windows Infrastructure app?
I believe I have set up the SA-ldapsearch correctly as it gets data when the search is run from there.

[ChrisG]

Is that the entire text of the error message?. Have you gone through the troubleshooting information in the documentation?

[sloshburch]

Although this specific error message isn't listed, the Troubleshoot the Splunk Supporting Add-on for Active Directory may also come in handy with @ChrisG's mentioned of troubleshooting material.

[mdsnmss]

What is the sharing level on SA-ldapsearch? If it is not exported globally it will work within the SA-ldapsearch context fine, but will not be seen by other apps.

[sloshburch]

Agreed. The app or the command may have something up with the permissions. Check out Manage knowledge object permissions