Splunk Enterprise

Enterprise Security: Security Posture Drilldown Error

FelixL
Loves-to-Learn Lots

Hello Community,

I have a problem with the lastest Enterprise Security Version.
In the Security Posture Dashboard, when I drilldown the Top Notable Events, the URL is returned correctly but one thing breaks the whole Drilldown. The URLEncode sometimes is applied twice. So instead of %20 replacing spaces in the rule name that was used in the drilldown instead the URL includes %2520.
This breaks the Drilldown and then shows all Rule Names instead.
The weirdest Part about it is that independent of the Rule Name clicked it sometimes works and sometimes doesn't. 
A Reload through the associated Button on the Incident Review Page also fixes the error but this is still a nuisance in the daily business.

I have searched the Web for similar experiences but haven't found anything:
My question is if anybody else has the same problem so I can make sure that this is not some error from local files (which I checked, but its always possible I missed something) but something thats broken by default.
Im not fond of changing anything in the deeper Code of Enterprise Security but if anybody has a solution to the problem I'd be glad!

Labels (1)
0 Karma

emzed
Path Finder

Hello FelixL,


I have the same problem as you. Did you find out why it happened and how to fix it?

If you change the locale in the url, it will sometimes start working. For example, en-US to en-GB

0 Karma
Get Updates on the Splunk Community!

New This Month in Splunk Observability Cloud - Metrics Usage Analytics, Enhanced K8s ...

The latest enhancements across the Splunk Observability portfolio deliver greater flexibility, better data and ...

Alerting Best Practices: How to Create Good Detectors

At their best, detectors and the alerts they trigger notify teams when applications aren’t performing as ...

Discover Powerful New Features in Splunk Cloud Platform: Enhanced Analytics, ...

Hey Splunky people! We are excited to share the latest updates in Splunk Cloud Platform 9.3.2408. In this ...