Dashboards & Visualizations

Error in dashboard "SH - 14 - Splunk Knowledge Object Changes" in AP4S

New Member


I'm trying to setup this AP4S App in our nonprod environment and it seems that this will be beneficial to our Splunk admins. 

Just wanted to check about the error that we're seeing in SH-14, the dashboard about KO changes. Particularly in Panel 2 - List. The 'ia4s_ko_changes_csv_lookup' lookup file doesn't exist. 

I've checked the corresponding job, seems fine to me. Maybe I'm missing something.

But I noticed that it's corresponding search101 "IA4S-013" works fine. The query is different with what's in SH-14 though so I'm not really sure.

Please advise.




Labels (2)
0 Karma
Get Updates on the Splunk Community!

Detecting Remote Code Executions With the Splunk Threat Research Team

WATCH NOWRemote code execution (RCE) vulnerabilities pose a significant risk to organizations. If exploited, ...

Enter the Splunk Community Dashboard Challenge for Your Chance to Win!

The Splunk Community Dashboard Challenge is underway! This is your chance to showcase your skills in creating ...

.conf24 | Session Scheduler is Live!!

.conf24 is happening June 11 - 14 in Las Vegas, and we are thrilled to announce that the conference catalog ...