Activity Feed
- Posted MS Windows AD Objects: Why won't lookups build? on All Apps and Add-ons. 08-25-2022 10:49 AM
- Karma PAN-OS 9.1.1 Breaks Data Model? for gfisbeck. 06-05-2020 12:51 AM
Topics I've Started
Subject | Karma | Author | Latest Post |
---|---|---|---|
0 |
08-25-2022
10:49 AM
I recently re-installed MS Windows AD Objects app due to some issues. After the re-install, I tried the lookups build configuration wizard, but it doesn't seem to build lookups even though wizard ran successfully with all green "successful" message.
I tried reseting the admon baseline, adding manual domain input but still no luck. Indexes look correct, log is still getting ingested,
I used pre-defined TA inputs.conf files, mainly working with 1 DC. This DC has below apps. Splunk_TA_windows Splunk_TA_windows_dc Splunk_TA_windows_admon
Main lookup i'm trying to build is 'AD_User_LDAP_list' as my searches with this lookup shows error message "The lookup table 'AD_User_LDAP_list' requires a .csv or KV store lookup definition."
Can somebody point me to the right direction to fix this issue?
... View more
Labels
- Labels:
-
configuration
-
troubleshooting