Splunk Enterprise Security

Splunk ES Threat Artifacts dashboard don't working

Path Finder

Hi splunkers,

My entprise security threat artifacts dashboard doesn't working.
It's stuck in "search waiting for input" .
I don't change any configuration.

Also threat_artifacts view file %100 correct , I check in splunk free enterprise security service in cloud.
All of dashboards view in same page. it's a another problem.

How ı fix this. Or how can ı find a problem. ?

alt text

0 Karma

Builder

Would raise a Splunk support ticket

0 Karma

Influencer

@burakatabay any update on this? I am having similar issue.

0 Karma

Path Finder

there was no update this problem, But ı thiking problem is SA-Utils OR SA-Cim_validator App.
Do you have one of these installed in your splunk env.
The problem started when I installed one of these applications.

0 Karma