All Apps and Add-ons

symantec app dashboard is empty

New Member

hi all

i've one splunk server reside on linux i've finished installed splunk for symantec app
i work with syslog i saw all events in splunk when i do searching but dashboard is empty

someone have any suggest about this issue

Tags (1)
0 Karma


Hi asafi31.
Did you found the problem ?
I got the same and dont know how to solve it.
It's appear that the sub sourcetype are not applied then, the dashboards return no result.
But I dont Know exactly how to make it working.

0 Karma

Splunk Employee
Splunk Employee

What is the sourcetype that the symantec events are coming in as? If it's not "sep", try setting the sourcetype to sep in inputs.conf.

0 Karma
Get Updates on the Splunk Community!

Observability | How to Think About Instrumentation Overhead (White Paper)

Novice observability practitioners are often overly obsessed with performance. They might approach ...

Cloud Platform | Get Resiliency in the Cloud Event (Register Now!)

IDC Report: Enterprises Gain Higher Efficiency and Resiliency With Migration to Cloud  Today many enterprises ...

The Great Resilience Quest: 10th Leaderboard Update

The tenth leaderboard update (11.23-12.05) for The Great Resilience Quest is out >> As our brave ...