All Apps and Add-ons

No available content in MITRE ATT&CK Framework Dashboard in ESS

TonyPham
Splunk Employee
Splunk Employee

Hello, I am working with Splunk Security Essentials, and in the Analytics Advisor, there is a MITRE ATT&CK Framework dashboard which is not being populated, as can be seen on the screenshot, despite finishing the Data Inventory Introspection, and in other places I can see the data exists. Data models are also populated but most are not accelerated except of Authentication data model. This is a production environment and definitely has data. There should be some "Available" content there.

TonyPham_0-1737622598091.png

Labels (1)
0 Karma
Get Updates on the Splunk Community!

Strengthen Your Future: A Look Back at Splunk 10 Innovations and .conf25 Highlights!

The Big One: Splunk 10 is Here!  The moment many of you have been waiting for has arrived! We are thrilled to ...

Now Offering the AI Assistant Usage Dashboard in Cloud Monitoring Console

Today, we’re excited to announce the release of a brand new AI assistant usage dashboard in Cloud Monitoring ...

Stay Connected: Your Guide to October Tech Talks, Office Hours, and Webinars!

What are Community Office Hours? Community Office Hours is an interactive 60-minute Zoom series where ...