Splunk Enterprise Security

updated to newer SES version = added step when editing a notable :(

splunker1980
New Member

so before the update (was v6.4.1) we would edit the incident in 'incident review' ->  add a comment or change some status -> click on 'save changes' and the pop up window would disappear and the incident list would refresh. All good and dandy.

But after the update (v6.6.0) when we click on 'save changes'; we have to wait for about 4 seconds for the close button to be clickable and then we have to click on it to dismiss the window. It is a bit of a productivity killer.

I would like to find a way to remove the need to click on the close button. Can anybody point me to the right direction on where can I get some documentation on it? 

0 Karma
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.
Get Updates on the Splunk Community!

Fastest way to demo Observability

I’ve been having a lot of fun learning about Kubernetes and Observability. I set myself an interesting ...

September Community Champions: A Shoutout to Our Contributors!

As we close the books on another fantastic month, we want to take a moment to celebrate the people who are the ...

Splunk Decoded: Service Maps vs Service Analyzer Tree View vs Flow Maps

It’s Monday morning, and your phone is buzzing with alert escalations – your customer-facing portal is running ...