- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
srickermartin
Engager
01-08-2019
10:44 AM
ES Incident review Contextualize and Investigate returns blank results page. This looks like it would be a nice addition for my guys if it worked. If anyone has this working please share.
1 Solution
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
srickermartin
Engager
01-10-2019
07:39 AM
I believe I have answered my own question. The issue appears to be the lack of data for the leveraged data models in the underlying searches that are used for this feature. All that needs to be done is to provide the data in a CIM format and let the model build.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
srickermartin
Engager
01-10-2019
07:39 AM
I believe I have answered my own question. The issue appears to be the lack of data for the leveraged data models in the underlying searches that are used for this feature. All that needs to be done is to provide the data in a CIM format and let the model build.
