Hi, I found a workaround to auto-refresh Incident Review dashboard by adding these 3 lines below to this html file as it is already included in Incident Review dashboard xml file. /opt/splunk/etc/apps/SA-ThreatIntelligence/appserver/templates/generic.html <head> <meta http-equiv="refresh" content="300"> </head> This will refresh the page after 300 seconds (5 mins). <%inherit file="base.html"/>
<head>
<meta http-equiv="refresh" content="300">
</head>
<div class="preload">
<div id="placeholder-splunk-bar">
<a href="${make_url([])}" class="brand" title="splunk > listen to your data">splunk<strong>></strong></a>
</div>
<div id="placeholder-app-bar"></div>
<div id="placeholder-main-section-body">
${_('Loading...')}
</div>
</div> Please let me know for any further details, and accept the answer if it solved the problem. Ahmed
... View more
