Troubleshoot AD Sensor
This information provides solutions for common Active Directory (AD) Sensor issues.
AD Sensor is not working as expected
Possible causes:
- DHCP logs are not stored at C:\Windows\System32\dhcp\DhcpSrvLog-.log*.
- The IP address of the Arctic Wolf Sensor or vLC has changed.
Resolution: Contact your Concierge Security® Team (CST) for assistance.
TCP port 514 is blocked by a firewall
Possible cause: TCP port 514 is blocked by a firewall from domain controller (DC) to the Sensor management IP address.
Note: You can check C:\Program Files (x86)\nxlog\data\nxlog.log to view the error log and verify that this is the issue.
Resolution:
Make sure that port 514 is open in your firewall from your DCs to the Sensor management IP address.