SUCCESS - Found eventtype=msad-dc-health data
WARNING!! - No ActiveDirectory baseline (Sync) data found. Run through Deployment Steps indashboard
I have tried everything that I'm capable of to resolve this, and walked through the online guide, and the troubleshooting appendix for the MSAD objects manual and can't find where I'm not getting the AD baseline sync data from. The validation query fails. Can anyone point me in a general direction? (First time splunkbaser)
I have (2) DC's that have Win, AD, DNS, and fwdtoindexer apps deployed to them. They are both fully responsive and sending data. They are Win2k12 boxes, and my Splunk deployment is Enterprise on prem (w2k12), single box, 12c, 12gb 200+gb storage
... View more