Splunk Enterprise Security

No pre-populated data in Splunk ES sandbox trial

peterdickens
Engager

I registered for an ES sandbox trial but there is no pre-populated data . Plus, there is a message stating:

"Health Check: Splunk server "si-i-0fa8cd1f1571aa99c.prd-p-ek6ui.splunkcloud.com" does not meet the recommended minimum system requirements."

What should I do to make it right?

warningwarningnot pre-populatednot pre-populated

Thanks in advance for your help.

Tags (2)

indut
Path Finder

Thanks for raising this query. I am having same issue, there is no pre-populated data in the sandbox version. 

0 Karma

inventsekar
SplunkTrust
SplunkTrust

Hi @peterdickens .. did you just create the sandbox, maybe give it some time(maybe 10 to 30mins).. 

How do I access the sample data?
There’s no need to do anything – the sample data will be automatically inserted using a test data generator. Within a couple of minutes, data will populate the dashboards as if it was a live system.

https://www.splunk.com/en_us/products/premium-solutions/splunk-enterprise-security/online-sandbox-fa...

 

if the issue persists, then contacting Splunk Support would be ideal - 

How do I get help with my Splunk Enterprise Security Sandbox?
The Splunk Enterprise Security Sandbox has community-level support. If you experience issues, complete the form here

thanks and best regards,
Sekar

PS - If this or any post helped you in any way, pls consider upvoting, thanks for reading !
0 Karma

peterdickens
Engager

Hi inventsekar,

Thank you for your reply.

I did create the sandbox yesterday. I  did contact the support already, via that same form but they haven't replied.

Besides, it seems there is a issue with the server minimal requirement, which is out of my control.

 

0 Karma
Get Updates on the Splunk Community!

Accelerating Observability as Code with the Splunk AI Assistant

We’ve seen in previous posts what Observability as Code (OaC) is and how it’s now essential for managing ...

Integrating Splunk Search API and Quarto to Create Reproducible Investigation ...

 Splunk is More Than Just the Web Console For Digital Forensics and Incident Response (DFIR) practitioners, ...

Congratulations to the 2025-2026 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...