This is a guide to the Splunk “Lockout Events (AD)” Dashboard, which includes two different reporting sections, Lockouts with Source and DC (Domain Controller), and Lockout Stats. Splunk dashboard is intended as a replacement for the PowerShell script driven lockout reporting system, which results in a CSV being published to the ET&S Help Desk Services Sharepoint.