topic Notable Event Status Inconsistency Between List View and Detail View in Mission Control in Splunk Enterprise Security

Notable Event Status Inconsistency Between List View and Detail View in Mission Control

torgynnurlankul — Wed, 05 Nov 2025 13:13:39 GMT

I'm experiencing a status synchronization issue in Splunk Enterprise Security 8.3.2 where the notable event status displays differently between the incident list and the detailed event view.

Issue Details:

In the Incident Review list, the event shows status as "New"
When navigating to the details of the same event, the status displays as "In Progress"
This creates confusion regarding the actual current status of the event

Re: Notable Event Status Inconsistency Between List View and Detail View in Mission Control

livehybrid — Wed, 05 Nov 2025 22:32:27 GMT

Hi @torgynnurlankul

Had the status changed between loading the Mission Control Analyst Queue screen and clicking on the specific Finding? As far as I understand, the content of the queue/table does not auto-reload when changes are made- however opening the detail for a finding would load the latest information for it.

🌟 Did this answer help you? If so, please consider:

Adding karma to show it was useful
Marking it as the solution if it resolved your issue
Commenting if you need any clarification

Your feedback encourages the volunteers in this community to continue contributing

Re: Notable Event Status Inconsistency Between List View and Detail View in Mission Control

torgynnurlankul — Thu, 06 Nov 2025 05:34:51 GMT

Thank you for the response. However, this doesn't appear to be a timing/refresh issue in our case.

Additional Details:

This inconsistency is affecting approximately 10 notable events simultaneously
The status mismatch persists even after manually refreshing the Incident Review page
All affected events consistently show "New" in the list view but "In Progress" when accessing the detail view
This behavior is reproducible and consistent across multiple page refreshes and different user sessions