Overview

You set up users in the Exinda via Active directory, but the IP address for users is not reflecting under the users and groups. This issue is causing monitoring reports that are not reflecting user details. You are unable to see AD usernames and the audit policy logs contain duplicate entries and are not generating #4624 entries.

Solution

1. Please see the article Unable to see Active Directory Users on Realtime and User Monitoring
2. Please ensure users on a group policy that have logon events set as success.
3. Please see the Active Directory Troubleshooting for details on AD integration in Exinda to resolve duplicate entries in the Logon Policy and #4624 events not being generated.

Testing

Check if usernames and IPs are now mapping in the Exinda.

If you are still having difficulty, please follow the Active Directory Troubleshooting article to generate a ExindaAD.log and open a Support ticket.