In the Splunkincidentreview dashboard, when the customer is clicking on the submit button, they can see the event count at the top. But instead of events in the result, Splunk is showing "Search d...
In the IncidentReview panel, we select a Notable Event, click on Edit Selected and a form pops up.
I chose the first dropdown, selected "ACKIN" and clicked on Save and was returned:
Unable to c...
...earches and views..." state.
The same is true for the IncidentReview Page. (see below)
I already checked the configuration health. The local overrides and the local overrides and removed s...
I am seeing a number of events for abnormally high number of HTTP POST requests in our enterprisesecurityincidentreview, many of which are allowed communication between our systems. What would b...