Hello Dear Friends
I installed splunk enterprise security 5.3.0 on the searchhead and installed Fortinet FortiGate Add-On for Splunk on the searchhead and indexer, then configure 3 Fortigate 600C to send log on port 1514 to splunk indexer, on indexer configured data input on port 1514 with fgt_log source type.
And now on the following dashboard page in ES 5.3.0 nothing is shown.
Can you help me for troubleshooting it ?
Security Domain->Access->Access Center
Security Domain->Endpoint->Malware Center
Security Domain->Network->Traffic Center
Security Domain->Network->Intrusion Center
Security Domain->Network->Web Center
Security Domain->Network->Network Changes
Security Domain->Network->Port & Protocol Tracker
Security Domain->Identity->Session Center
TA page: https://splunkbase.splunk.com/app/2846/
... View more