How to get data into the splunk OT add on security...

munna · ‎06-11-2021

hello,

I had the splunk enterprise with the ES and OT add-ons. I accelerated the data model of the OT_Asset DM and created the correlation search in the ES(Enterprise Security) add-on through config>content management>new content>new correlation search.But in splunk OT add-on the dash boards are not showing the values they showing only 0's.how can I get my data into splunk OT dashboards, is there any other ways to do that. If have please let me know.

paolos · ‎08-04-2022

Hello ,

what type of data are you trying to ingest?
From the dashboard , the asset need the ot_asset tag to be searchable

Paolo

How to get data into the splunk OT add on security posture dashboard?

Data Persistence in the OpenTelemetry Collector

Thanks for the Memories! Splunk University, .conf25, and our Community

Introducing Splunk 10.0: Smarter, Faster, and More Powerful Than Ever

Are you a member of the Splunk Community?

How to get data into the splunk OT add on security posture dashboard?

Data Persistence in the OpenTelemetry Collector

Thanks for the Memories! Splunk University, .conf25, and our Community

Introducing Splunk 10.0: Smarter, Faster, and More Powerful Than Ever