Incident Review dashboard has no value

[blank]

Incident review dashboard is displaying no value, despite having correlation searches enabled. Upon investigation, I noticed that the notable index has 0 bytes. 

Could someone kindly guide me on how to troubleshoot this issue? Thanks!

[gcusello]

Hi @blank ,

some very stupid questions:

did you enabled Notables as Adaptive Response actions for you Correlation Searches?

are any Correlation Searches triggered?

Ciao.

Giuseppe

[blank]

Hi @gcusello 

Yes, I enabled notables as adaptive response actions for my CS. I tried checking the incident review dashboard and run search queries, but the output is 0.