When drilling down to Single Logon details I'm able to see information in the first pane (Main Phases, Active Directory), the second pane (Processing Time per Logon Phase), and both panes containing Group Policy information, but below that the Logon Process Performance panes say "no results found."
I've confirmed that the uberAgent apps are installed and available in Splunk and that the indexer is running. I've restarted the Splunk server, and reinstalled the endpoint piece. Still no luck.
What would cause this behavior?