All Apps and Add-ons

Windows Infr App - Active Directory Part

hnakhle
Explorer

Hello,

I have installed the Windows Infrastructure App to check the Active Directory Dashboards/Reports.
I installed all Active Directory requirements (Add-ons) on the AD and Splunk Level as mentioned in the online guides.
I configured the AD settings in one of the Add-ons, and the connection testing to AD were successful. The user configured on the Splunk UF Service level is also full privileged.

My issue is: I created a user on the Active Directory.
On Splunk Reports App, when I searched for the event I found it. But, on the Windows App, I couldn't find it in the User Create report.

Help!!

0 Karma
Get Updates on the Splunk Community!

Observability Highlights | January 2023 Newsletter

 January 2023New Product Releases Splunk Network Explorer for Infrastructure MonitoringSplunk unveils Network ...

Security Highlights | January 2023 Newsletter

January 2023 Splunk Security Essentials (SSE) 3.7.0 ReleaseThe free Splunk Security Essentials (SSE) 3.7.0 app ...

Platform Highlights | January 2023 Newsletter

 January 2023Peace on Earth and Peace of Mind With Business ResilienceAll organizations can start the new year ...