Hello, in clustered environment or standalone,
after upgrading first Splunk core then Splunk ES, incident review not working anymore, not showing any notable.
The macro `notable` is in error and we can see SA-utils python errors in log files.
* If this helps, please upvote or accept solution if it solved *
