hello,
I had the splunk enterprise with the ES and OT add-ons. I accelerated the data model of the OT_Asset DM and created the correlation search in the ES(Enterprise Security) add-on through config>content management>new content>new correlation search.But in splunk OT add-on the dash boards are not showing the values they showing only 0's.how can I get my data into splunk OT dashboards, is there any other ways to do that. If have please let me know.
Hello ,
what type of data are you trying to ingest?
From the dashboard , the asset need the ot_asset tag to be searchable
Paolo