Hi @richgalloway , I added the dashboards of OT  to the ES, I examine the indexes like notable,risk, evt_sum_ot_asset_traffic now iknow how to fed data into the notables.But incase of other indexes i don't know so. how the data is stored in the index=risk,index=evt_sum_ot_asset_traffic in the splunk ES and OT add-ons. is there any specific procedure to fed data. please let me know if it has ... View more

Hi @richgalloway , I created a DM for alerts and accelerated it after that  I created a correlation search for that it showing the data in the dashboards of ES. similarly, i deal with the Splunk OT add-on by accelerating the OT-asset DM and creating a correlation search but, in this case, it shows the events in the ES dashboard instead of showing the data on the Splunk OT add-on dashboards. how to show that data on the Splunk OT dashboards is there any other way to do that please let me know that. please let me know if anything extra configuration needed.   ... View more

HI @richgalloway , First of all, thank you for your reply, But I config the CIM model according to this https://docs.splunk.com/Documentation/CIM/4.19.0/User/Alerts data model. After doing that also did not show the data in the ES app  I have done as you mentioned in this way, but it also did not show the data in the ES dashboards it shows only 0's. Can you please let me know if I missed any fields in the data model? ... View more