Splunk Enterprise

Enterprise Security: Security Posture Drilldown Error

FelixL
Loves-to-Learn Lots

Hello Community,

I have a problem with the lastest Enterprise Security Version.
In the Security Posture Dashboard, when I drilldown the Top Notable Events, the URL is returned correctly but one thing breaks the whole Drilldown. The URLEncode sometimes is applied twice. So instead of %20 replacing spaces in the rule name that was used in the drilldown instead the URL includes %2520.
This breaks the Drilldown and then shows all Rule Names instead.
The weirdest Part about it is that independent of the Rule Name clicked it sometimes works and sometimes doesn't. 
A Reload through the associated Button on the Incident Review Page also fixes the error but this is still a nuisance in the daily business.

I have searched the Web for similar experiences but haven't found anything:
My question is if anybody else has the same problem so I can make sure that this is not some error from local files (which I checked, but its always possible I missed something) but something thats broken by default.
Im not fond of changing anything in the deeper Code of Enterprise Security but if anybody has a solution to the problem I'd be glad!

Labels (1)
0 Karma

emzed
Path Finder

Hello FelixL,


I have the same problem as you. Did you find out why it happened and how to fix it?

If you change the locale in the url, it will sometimes start working. For example, en-US to en-GB

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Event Series May & June: From Network Visibility to Service Intelligence

Unifying the Network: Moving from Alert Noise to Service Intelligence with Splunk ITSI In today’s hybrid ...

Global Splunk User Group Events: May + June 2026

Your Splunk Community Awaits: Discover Upcoming User Group Events Worldwide    Staying ahead in the fast-paced ...

Why Splunk Customers Should Attend Cisco Live 2026 Las Vegas

Why Splunk Customers Should Attend Cisco Live 2026 Las Vegas     Cisco Live 2026 is almost here, and this ...