Splunk Enterprise Security

Why is ESS "My Investigations" is not Loading.

marcuspr1
Explorer

When I go to ESS "My Investigations" Section it hangs on Loading. We are at Splunk Enterprise v7.2.3 and Splunk Enterprise Security v5.2.2. I looked at the Deployer where ESS was installed and noticed the " My Investigations" was named "Investigations. On the SHC the name is "My Investigations"

0 Karma

marcuspr1
Explorer

The fix was to go to Configure -> General -> Navigation. On the Edit Navigation Page, remove the My Investigations View and Add a New View called Investigations. Save and restart Splunk.

smoir_splunk
Splunk Employee
Splunk Employee

Yes, since the app preserves local navigation settings, any navigation changes due to release changes need to be updated manually. Win some / lose some 🙂

0 Karma
Get Updates on the Splunk Community!

Enter the Agentic Era with Splunk AI Assistant for SPL 1.4

  🚀 Your data just got a serious AI upgrade — are you ready? Say hello to the Agentic Era with the ...

Stronger Security with Federated Search for S3, GCP SQL & Australian Threat ...

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

Accelerating Observability as Code with the Splunk AI Assistant

We’ve seen in previous posts what Observability as Code (OaC) is and how it’s now essential for managing ...