Running Splunk Version 6.3.3 installed on CentOS. New implementation and trying to configure the Splunk App for Windows Infrastructure. Running guided setup, I get Warnings for "WinPrintMon" and "WMI". Then I run Detect Features and don't have check marks on "Applications and Updates" or "Print Monitoring" on the Windows side. I don't have check marks on "Users" or "Computers" or "Groups" on the Active Directory side.
I navigate to the Data Summary area of search and find data in the msad index and the main index from the source of ActiveDirectory.
↧