Splunk Enterprise Security

How to get a report of Investigations from Enterprise Security

ajayrejin
Explorer

How to get a report of Investigations from Enterprise Security. The report should contain Name, Description,Status,Created.
I checked on the incident review audit and i could find some dashboards, also noticed that we can use a search query : "| incident review' " to get the details.
Is there any similar query for the investigations that i can use? Any way of creating reporting?

0 Karma
Get Updates on the Splunk Community!

Splunk APM: New Product Features + Community Office Hours Recap!

Howdy Splunk Community! Over the past few months, we’ve had a lot going on in the world of Splunk Application ...

Index This | Forward, I’m heavy; backward, I’m not. What am I?

April 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

A Guide To Cloud Migration Success

As enterprises’ rapid expansion to the cloud continues, IT leaders are continuously looking for ways to focus ...