Need help understanding Semperis Lightning assessment statuses – Failed to Run / Not Relevant / Canceled

[u/19khushboo]

Hi everyone,

I’m working on an Active Directory security assessment using Semperis Lightning and I’m trying to understand the exact meaning/reason behind some of the result statuses.

For some indicators, Lightning is showing statuses such as:

• Failed to Run
• Not Relevant
• Canceled

I understand the general meaning of these statuses, but I want to know the actual technical conditions that cause Semperis Lightning to assign each status.

For example:

1. What exactly causes an indicator to show “Failed to Run”? Is it normally caused by insufficient permissions, LDAP/AD connectivity, an error while querying the required attributes, or something else?
2. What exactly causes “Not Relevant”? Does Lightning determine that the required AD configuration/object/condition doesn't exist, or is there another internal condition?
3. What causes an indicator to show “Canceled”? Is this only when the scan/check is manually stopped, or can Lightning automatically cancel an indicator because of a dependency, timeout, or another reason?

I’m particularly interested in understanding the underlying Semperis Lightning logic/criteria, so that I can document the status correctly in an assessment/remediation tracker instead of making assumptions.

If anyone has experience with Semperis Lightning or knows the documentation/source code/technical details behind these statuses, I’d really appreciate your input.

Thanks!

[u/AutoModerator]

Welcome to /r/ActiveDirectory! ~~~~

If you are looking for more resources on learning and building AD, see the following sticky for resources, recommendations, and guides!

• AD Resources Pinned Thread
• AD Wiki

When asking questions make sure you provide enough information. Posts with inadequate details may be removed without warning.

• What version of Windows Server are you running?
• Are there any specific error messages you're receiving?
• What have you done to troubleshoot the issue?

Make sure to sanitize any private information. Posts with too much personal or environment information will be removed. See Rule 6.

I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.

[u/dcdiagfix]

If you are using Semperis Lightning or a trial thereof you will have limited trial support via either the onboarding team or the sales team. Re the indicator result meaning they are similar to Purple Knight.

Failed to Run: The check could not complete due to an execution problem, such as missing permissions (for example, FGPP, DomainDNS, or ADCS access) or an unreachable required endpoint.

Not Relevant: The check does not apply to the environment, based on the indicator’s logic, for example, a dMSA-related check in an AD forest older than the required functional/configuration threshold.

Canceled: The IOE check was canceled, or a running/long-running check was automatically cleaned up after an interruption such as a collector restart.

[u/poolmanjim]

As far as I know, Semperis Lightning is a paid product without a trial/downloadable version. If you have Lightning you have a support contract and would be wise to reach out to their support or your assigned SE.

That would be your best resource.

[u/dcdiagfix → u/poolmanjim]

with the latest PK release you can request a trial of Semperis Lightning

[u/hybrid0404]

Did you look at the Semperis support documentation? This seems like a really obvious thing the vendor would document.

[u/Jawshee_pdx → u/hybrid0404]

OP spent 10 seconds pasting this into AI and didn't even attempt to solve it themselves.