Hello,
I have installed the Windows Infrastructure App to check the Active Directory Dashboards/Reports.
I installed all Active Directory requirements (Add-ons) on the AD and Splunk Level as mentioned in the online guides.
I configured the AD settings in one of the Add-ons, and the connection testing to AD were successful. The user configured on the Splunk UF Service level is also full privileged.
My issue is: I created a user on the Active Directory.
On Splunk Reports App, when I searched for the event I found it. But, on the Windows App, I couldn't find it in the User Create report.
Help!!
