I have all of my domain controllers reporting to our Splunk server. However, when the list of domain controllers is generated, there is no entry for NetBIOS Name or Site Name. What information, from the domain controller, is used to generate these entries?
Thank you,
Carey
Hi Carey,
Also make sure that the domaincontroller and dns TAs from the AD app are on each of your domain controllers, and verify PowerShell is enabled.
http://blogs.splunk.com/2012/10/21/splunk-app-for-active-directory-and-the-top-10-issues/
How are you listing domain controller names? What App's URL are using? Are you able to access the view using Manager >> User Interface, clicking on the view name from AD App? Doing that, you will access the XML code behind the AD App's dashboard. Into this XML code you'll find the query which request data from Splunk's index to populate the combo box.