Did you ever get this working? I am running into the same issue. I thought i could just login to the ISM and go to the Incident workspace and select the search i wanted to pull from "All Active Incidents" (i.e. http://ism_url/heat/Default.aspx#1622727356175). I don't think this is working because i don't see any data in my index yet.
... View more
Any update on this thread would be helpful. I am trying to configure the app on an 8.x splunk instance pointing to an NSX-T 3.x instance. Is there a configuration needed to point the app at the NSX manager?
... View more