topic In Splunk Security Essentials, Data Source Check is not populating the live data even after adding them manually. in Splunk Enterprise https://community.splunk.com/t5/Splunk-Enterprise/In-Splunk-Security-Essentials-Data-Source-Check-is-not/m-p/504941#M2027 <P>Our organization has Splunk Security Essentials app and our end goal is to map the data source to the MITRE Framework</P><P>The issue is that the live data which was added manually in the data inventory tab is not showing up in data source check. Please find the screenshot below.</P><P>&nbsp;</P><P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="renjujacob88_1-1592471443786.png" style="width: 768px;"><img src="https://community.splunk.com/t5/image/serverpage/image-id/9229i90552C5F09840EB2/image-dimensions/768x309?v=v2" width="768" height="309" role="button" title="renjujacob88_1-1592471443786.png" alt="renjujacob88_1-1592471443786.png" /></span></P><P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="renjujacob88_2-1592471720822.png" style="width: 767px;"><img src="https://community.splunk.com/t5/image/serverpage/image-id/9230iE6F7B6826E7E0783/image-dimensions/767x46?v=v2" width="767" height="46" role="button" title="renjujacob88_2-1592471720822.png" alt="renjujacob88_2-1592471720822.png" /></span></P><P>&nbsp;</P><P>I have added them manually when it was not auto detected. We made a custom entry assigning the index and source types.&nbsp; But it failing to show the live data but the data actually exists</P><P>Any leads on this would be helpful.</P> Thu, 18 Jun 2020 10:30:13 GMT renjujacob88 2020-06-18T10:30:13Z In Splunk Security Essentials, Data Source Check is not populating the live data even after adding them manually. https://community.splunk.com/t5/Splunk-Enterprise/In-Splunk-Security-Essentials-Data-Source-Check-is-not/m-p/504941#M2027 <P>Our organization has Splunk Security Essentials app and our end goal is to map the data source to the MITRE Framework</P><P>The issue is that the live data which was added manually in the data inventory tab is not showing up in data source check. Please find the screenshot below.</P><P>&nbsp;</P><P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="renjujacob88_1-1592471443786.png" style="width: 768px;"><img src="https://community.splunk.com/t5/image/serverpage/image-id/9229i90552C5F09840EB2/image-dimensions/768x309?v=v2" width="768" height="309" role="button" title="renjujacob88_1-1592471443786.png" alt="renjujacob88_1-1592471443786.png" /></span></P><P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="renjujacob88_2-1592471720822.png" style="width: 767px;"><img src="https://community.splunk.com/t5/image/serverpage/image-id/9230iE6F7B6826E7E0783/image-dimensions/767x46?v=v2" width="767" height="46" role="button" title="renjujacob88_2-1592471720822.png" alt="renjujacob88_2-1592471720822.png" /></span></P><P>&nbsp;</P><P>I have added them manually when it was not auto detected. We made a custom entry assigning the index and source types.&nbsp; But it failing to show the live data but the data actually exists</P><P>Any leads on this would be helpful.</P> Thu, 18 Jun 2020 10:30:13 GMT https://community.splunk.com/t5/Splunk-Enterprise/In-Splunk-Security-Essentials-Data-Source-Check-is-not/m-p/504941#M2027 renjujacob88 2020-06-18T10:30:13Z