topic Splunk Security Essentials mitre_overview Not Loading Correctly in All Apps and Add-ons

Splunk Security Essentials mitre_overview Not Loading Correctly

kprior201_lilly — Mon, 24 May 2021 20:31:59 GMT

I just upgraded my Splunk Security Essentials app from 3.1.1 to 3.3.3. I'm running Splunk Enterprise 8.1.4. When I access the Analytics Advisor / MITRE ATT&CK Framework page, the MITRE ATT&CK Matrix just refuses to load. Has anyone encountered this, and do you have any troubleshooting suggestions?

Re: Splunk Security Essentials mitre_overview Not Loading Correctly

aasabatini — Tue, 25 May 2021 05:55:53 GMT

Hi @kprior201_lilly

did you try to check the sources again on the security essentials?

Re: Splunk Security Essentials mitre_overview Not Loading Correctly

kprior201_lilly — Tue, 25 May 2021 15:22:09 GMT

I just poked around in that screen, but it doesn't seem to be what I'm looking for. Previously, the MITRE matrix loaded just fine; I have content enabled that should reflect here. The rest of the page loads as well; it's just the one matrix that isn't working.

Re: Splunk Security Essentials mitre_overview Not Loading Correctly

aasabatini — Wed, 26 May 2021 06:08:56 GMT

Hi @kprior201_lilly

what version of security essentials do you have installed?

Can you share a screen of mitre matrix to check the error?

Regards

Alessandro

Re: Splunk Security Essentials mitre_overview Not Loading Correctly

kprior201_lilly — Thu, 27 May 2021 12:19:30 GMT

It's version 3.3.3; the screenshot is attached to the original post. It doesn't give an error at all, it just doesn't display the matrix. When I look at the Job Inspector, there aren't any errors, either.