ES: incident Review is not showing as expected

[neelamsantosh]

Our incident Review board has different view and not functioning as expected due to which we are unable to filter from the dropdown list

Chrome: up to date (Version 57.0.2987.133 (64-bit))
Splunk Enterprise : 6.5.2
Splunk ES: 4.1

[neelamsantosh]

I believe this is known issue SOLNESS-10915. Enterprise Security 4.1 is
not compatible with version 6.5.x of Splunk. It is recommended to upgrade
your Enterprise Security as the workaround for this issue.

http://docs.splunk.com/Documentation/ES/4.1.1/RN/KnownIssues

[hardikJsheth]

I agree with @smoir.

In case you are upgrading from earlier version of ES try to reload the IR page after clearing cache of your browser.

[smoir_splunk]

Hello @neelamsantosh,

Make sure you are using a compatible version of Splunk Enterprise with Splunk Enterprise Security.

Check this table for your version of Enterprise Security: http://docs.splunk.com/Documentation/ES/4.6.0/Install/DeploymentPlanning#Splunk_Enterprise_system_re...

Thanks,
Sarah