I'm trying to get through the guided set up for the Windows Infrastructure App but when running through the data checks for Active Directory, i get Search "sourcetype="MSAD*" | head 5" did not return any events in the last 24 hours. I have active directory data being pulled, and my msad index has data in it.. What am I missing?? I have NO sourcetypes of "MSAD", but have tons of "Active Directory" source types. Nothing in the forums has seemed to answer my question. I appreciate any assistance. Thank you ... View more