i am trying to integrate group ib with splunk for which i installed the app entered my api key and username from which it redirects to the homepage. but all my dashboards are empty and no indexes are created? how can i troubleshoot or fix it?
Wait a moment. What exactly are you trying to do? Because it sounds as if you were trying to use WebUI to configure... inputs(?) in an app which you installed using WebUI somewhere over a SH cluster.
More often than not it would be because of the default macro not being updated - which has information about "in which index the data resides". As @Bhumi suggested, can you share the name of the TA to assist you more?
