Splunk Enterprise

Enterprise Security: Security Posture Drilldown Error

FelixL
Loves-to-Learn Lots

Hello Community,

I have a problem with the lastest Enterprise Security Version.
In the Security Posture Dashboard, when I drilldown the Top Notable Events, the URL is returned correctly but one thing breaks the whole Drilldown. The URLEncode sometimes is applied twice. So instead of %20 replacing spaces in the rule name that was used in the drilldown instead the URL includes %2520.
This breaks the Drilldown and then shows all Rule Names instead.
The weirdest Part about it is that independent of the Rule Name clicked it sometimes works and sometimes doesn't. 
A Reload through the associated Button on the Incident Review Page also fixes the error but this is still a nuisance in the daily business.

I have searched the Web for similar experiences but haven't found anything:
My question is if anybody else has the same problem so I can make sure that this is not some error from local files (which I checked, but its always possible I missed something) but something thats broken by default.
Im not fond of changing anything in the deeper Code of Enterprise Security but if anybody has a solution to the problem I'd be glad!

Labels (1)
0 Karma

emzed
Path Finder

Hello FelixL,


I have the same problem as you. Did you find out why it happened and how to fix it?

If you change the locale in the url, it will sometimes start working. For example, en-US to en-GB

0 Karma
Get Updates on the Splunk Community!

Earn a $35 Gift Card for Answering our Splunk Admins & App Developer Survey

Survey for Splunk Admins and App Developers is open now! | Earn a $35 gift card!      Hello there,  Splunk ...

Continuing Innovation & New Integrations Unlock Full Stack Observability For Your ...

You’ve probably heard the latest about AppDynamics joining the Splunk Observability portfolio, deepening our ...

Monitoring Amazon Elastic Kubernetes Service (EKS)

As we’ve seen, integrating Kubernetes environments with Splunk Observability Cloud is a quick and easy way to ...