Error Msg:WARNING!! - No (eventtype=msad-dc-health) data found. Make sure you have deployed the Splunk Addon for Active Directory...


Hi, A bit new to the setup. We are trying to enable the MS Windows AD Objects App on our Cloud Instance.

We cannot get past this error message to generate msad lockups.
1 MSAD is an index and is receiving data
2 Active directory Baseline is Working...sourcetype="ActiveDirectory" admonEventType="Sync"
3 We have installed Add On for Microsoft Active Directory on 1 DC that is sending the AD objects. We have also installed Add on for Microsoft Windows on the same DC.

Thank you for any help.

Tags (1)
0 Karma
Did you miss .conf21 Virtual?

Good news! The event's keynotes and many of its breakout sessions are now available online, and still totally FREE!