The Incident Review dashboard is not listed in the pre-set list in Splunk Enterprise Security. Is this a dashboard I need to download, or is something missing from my ES? I need it to monitor my UBA threats.
Thanks
It should be visible by default, but if it isn't you can add it back to your menu with the Navigation editor: http://docs.splunk.com/Documentation/ES/4.2.0/User/ManageSearches#Navigation