Security Compliance

Directory Service Groups are not automatically updating

During normal operation, any Directory Service Groups you have created should be re-syncing and refreshing with your domain controller about every five minutes automatically. This article covers circumstances when these Directory Service Groups don't appear to be refreshing for extended periods after you have made changes to the group.

First published date

10/30/2018 6:39 PM

Last published date

6/8/2021 9:27 PM

Overview

This article applies to Security Event Manager (formerly Log & Event Manager).
During normal operation, any Directory Service Groups you have created and configured correctly in the Directory service group configuration windows should be re-syncing and refreshing with your domain controller about every five minutes automatically. This article covers circumstances when these Directory Service Groups does not appear to be refreshing for extended periods after you have made changes to the group.

Product section

Security Event Manager

Cause

A few possible causes for this issue:

  • Your SEM can no longer connect via LDAP to your domain controller
  • You changed the group on a different domain controller than the SEM is configured to use and haven't allowed enough time for replication

Resolution

  1. Verify that the LDAP connection is still functional by selecting Build > Groups > + sign > Directory Service Group. If you are using The SEM HTML5 Web Console, it can be found by selecting Configure>Directory service group. You should see your directory service objects appear in the bottom section of the screen. If they do not appear, check your LDAP configuration settings.
  2. Try restarting your manager service or rebooting your SEM from the hypervisor virtual console or an SSH shell. If this causes the groups to refresh and they seem to stop refreshing again after that, please contact SolarWinds Support to investigate.