Hello, I am evaluating the Splunk Enterprise on our environment and I have setup a on-premises server for that. Currently I am trying to configure the MS Windows AD Objects apps on splunk. The procedures have been carefully followed. However, it is failed on the last step - building lookups. When the process was trying to build AD_Obj_Admin_Audit lookup, the below error was reported: Warning: No Windows Change Events Found - Change Time Period Due to the error, the setup cannot be completed. I have changed the time period up to 5 years but still no luck. It would be appreciated if you could help us to troubleshoot the issue. Thanks ... View more