Splunk Enterprise Security

Splunk Enterprise Security: Dashboards not loading data

RK_sp1unk
New Member

We have a indexer , heavy forwarder, 2 search head , 1 deployment server .
The splunk enterprise Search head dashboards are pulling data and is looking good.
The other search head for enterprise security , dashboards are not pulling data.
I checked the data models are there , apps are updated.
Saw an distributed search alert stating "the rest uri https://10.102.102.212:8089 is not connecting as peer status is 2", not sure is it because of that.
However need urgent help how to get at least default Splunk ES dashboards like security posture,incident review etc to show data.
Please share your thoughts

0 Karma
Get Updates on the Splunk Community!

What's new in Splunk Cloud Platform 9.1.2312?

Hi Splunky people! We are excited to share the newest updates in Splunk Cloud Platform 9.1.2312! Analysts can ...

What’s New in Splunk Security Essentials 3.8.0?

Splunk Security Essentials (SSE) is an app that can amplify the power of your existing Splunk Cloud Platform, ...

Let’s Get You Certified – Vegas-Style at .conf24

Are you ready to level up your Splunk game? Then, let’s get you certified live at .conf24 – our annual user ...