All Apps and Add-ons

Windows Infr App - Active Directory Part



I have installed the Windows Infrastructure App to check the Active Directory Dashboards/Reports.
I installed all Active Directory requirements (Add-ons) on the AD and Splunk Level as mentioned in the online guides.
I configured the AD settings in one of the Add-ons, and the connection testing to AD were successful. The user configured on the Splunk UF Service level is also full privileged.

My issue is: I created a user on the Active Directory.
On Splunk Reports App, when I searched for the event I found it. But, on the Windows App, I couldn't find it in the User Create report.


0 Karma
Get Updates on the Splunk Community!

Splunk Lantern | Spotlight on Security: Adoption Motions, War Stories, and More

Splunk Lantern is a customer success center that provides advice from Splunk experts on valuable data ...

Splunk Cloud | Empowering Splunk Administrators with Admin Config Service (ACS)

Greetings, Splunk Cloud Admins and Splunk enthusiasts! The Admin Configuration Service (ACS) team is excited ...

Tech Talk | One Log to Rule Them All

One log to rule them all: how you can centralize your troubleshooting with Splunk logs We know how important ...