topic Splunk ES notables in Splunk Enterprise https://community.splunk.com/t5/Splunk-Enterprise/Splunk-ES-notables/m-p/754971#M23384 <P>Hello,</P><P>I am new to Splunk ES , I have just enabled all the&nbsp; Correlation search, but I do not get any notables in the incident review section.</P><P>Do I need to add some more configurations.</P><P>Thank you for your time.</P> Thu, 30 Oct 2025 12:24:44 GMT fedayn05 2025-10-30T12:24:44Z Splunk ES notables https://community.splunk.com/t5/Splunk-Enterprise/Splunk-ES-notables/m-p/754971#M23384 <P>Hello,</P><P>I am new to Splunk ES , I have just enabled all the&nbsp; Correlation search, but I do not get any notables in the incident review section.</P><P>Do I need to add some more configurations.</P><P>Thank you for your time.</P> Thu, 30 Oct 2025 12:24:44 GMT https://community.splunk.com/t5/Splunk-Enterprise/Splunk-ES-notables/m-p/754971#M23384 fedayn05 2025-10-30T12:24:44Z Re: Splunk ES notables https://community.splunk.com/t5/Splunk-Enterprise/Splunk-ES-notables/m-p/754974#M23386 <P>Just because you enabled a Correlation Search doesn't mean that you have proper data (properly parsed, possibly CIM-compliant, possibly in an accelerated data model).</P> Thu, 30 Oct 2025 13:14:12 GMT https://community.splunk.com/t5/Splunk-Enterprise/Splunk-ES-notables/m-p/754974#M23386 PickleRick 2025-10-30T13:14:12Z