Windows Infrastructure dashborad did not show any domain controller data

[daniel_splunk]

I've install the following on the universal forwarder running under windows 2012R2.

1. Splunk UF 6.1.1
2. TA-DNSServer-NT6
3. TA-DomainContgroller-2012R2
4. Splunk Add-on for PowerShell
5. Splunk_TA_windows

indexer dashboard didn't show any domain controller information.

Any ideas?

[daniel_splunk]

Several things to check.

1. SPLUNK_HOME/var/log/splunk/powershell.log
   If you copied the files onto the UF, you need to unblock the ps1 script.

2. Did you set the execution policy to remote signed.

3. run the following search in the indexer and check for any powershell error.
   index=msad source=Powershell sourcetype="Powershell:ScriptExecutionSummary"

4. If there is powershell error, try to execute them manually and see what the error is about.