i having some issues to populate the traffic center dashboard in splunk ES. It's showing as "Cannot read properties of undefined (reading 'map')".
anyone have any solutions?
Hi @Anit_Mathew
Did you get to the bottom of this?
This looks like the "Traffic Over Time By Protocol" panel which is broken? Which version of ES are you on?
In ES 7.3.2 the search it runs is something like this:
| `tstats` count from datamodel=Network_Traffic.All_Traffic where * by _time,All_Traffic.transport span=10m | timechart minspan=10m useother=`useother` count by All_Traffic.transport | `drop_dm_object_name("All_Traffic")`
Which doesnt look like it has a map command anywhere, unless you have altered any macros?
Please can you confirm the ES and CIM app versions you are using and if any changes have been made to the macros?
Please let me know how you get on and consider accepting this answer or adding karma this answer if it has helped.
Regards
Will
@Anit_Mathew- If it is Splunk ES default dashboard without any change in it and if it is still giving you error you can raise Splunk support ticket for it.