Getting Data In

java problem with active-directory

perlish
Communicator

I want to use the splunk app for active directory.I have installed the central splunk instance and ad app in two systems,one is win2008,the other is centos 6.2.But I come across problems within two system.The following is details:
1、win 2008 system
OS:Microsoft Windows Server 2008 R2 Enterprise
JAVA VERSION:java version "1.7.0_45"
Java(TM) SE Runtime Environment (build 1.7.0_45-b18)
Java HotSpot(TM) 64-Bit Server VM (build 24.45-b08, mixed mode)
PROBLEM:The ad app can't load my domain information,and when I use the "Group Audit",it reports errors like "External search command 'ldapsearch' returned error code 1.ERROR: java.lang.NullPointerException: null"

2、Centos 6.2 system
OS:CentOS release 6.2 (Final)
JAVA VERSION:java version "1.7.0_45"
Java(TM) SE Runtime Environment (build 1.7.0_45-b18)
Java HotSpot(TM) 64-Bit Server VM (build 24.45-b08, mixed mode)
PROBLEM:The app can load my domain information,but when I use "Group Audit",it report errors like External"search command 'ldapsearch' returned error code 1.ERROR: com.unboundid.ldap.sdk.LDAPException: Unable to establish a connection to any server in the fastest connect set because connection attempts failed in all servers."

I think all these is because the java ,but how can I solve them?
0 Karma

Adrian
Path Finder

I would start by reviewing this troubleshooting section of the documentation related to the Splunk App for AD.

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

SOK it to Me: Top 3 Benefits of Using Splunk Operator on Kubernetes that’ll Make ...

    Thursday, July 9, 2026  |  11:00AM–12:00PM PDT Duration: 1 hour (includes Q&A) Managing can feel like a ...

Upgrade Prep for 10.4, Network Observability Deep Dives, and More from Splunk Lantern

Splunk Lantern is Splunk’s customer success center that provides practical guidance from Splunk experts on key ...

Splunk Developer Day announcements: AI agents, MCP tools, Forecasting, and Custom ...

Splunk Developer Day was packed with product and platform updates for developers building in the AI ...