I just signed up to Splunk Enterprise Security (ES) sandbox but I do not see any links to create glass tables.
Where is the link to create and edit glass tables?
The ES sandbox is on version 4.1.x of Splunk Enterprise Security. The glass table functionality first appears in version 4.2.0 of Enterprise Security. If you engage with sales for a POC or to gain access to the private sandbox, you can see a more recent version of Enterprise Security with glass tables.