All Apps and Add-ons

TrackMe table does not display

GOB_Bluth
Explorer

The search job completes however the table panel never displays on the main page under 'Data Tracking' 

Any ideas where to look??

Labels (1)
Tags (1)
0 Karma

guilmxm
Influencer


Hi @GOB_Bluth 

Please apologise, I haven't noticed your question on TrackMe earlier. 

Have you made any progress? 

TrackMe is pretty straightforward, so it is unlikely that it cannot proceed to the discovery of the data sources, hosts and other types of obects being tracked.

I will think in writting a trouble shooting doc in the official documentation.

At the root of TrackMe, there are "trackers", which are scheduled reports designed to be tackling the data discovery and the maintenance of the various KVstore collections.

Focussing on data sources, you would first look at the reports named:

TrackMe - Data sources availability short term tracker

The first part of the search would allow to see easily the data being found:

| savedsearch "TrackMe - Data sources abstract root tracker"


You haven't shared much details such as screenshots, please do so or contact me on Slack if you are still blocked.

Guilhem







0 Karma
Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

In December, the Splunk Threat Research Team had 1 release of new security content via the Enterprise Security ...

Why am I not seeing the finding in Splunk Enterprise Security Analyst Queue?

(This is the first of a series of 2 blogs). Splunk Enterprise Security is a fantastic tool that offers robust ...

Index This | What are the 12 Days of Splunk-mas?

December 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...