Why does latest version of ES CU app indicates exploring Analytical Stories through ES or Sec Essentials App ?

[dm1]

Just downloaded the latest version of ES Content Update app and noticed the following message:

Explore the Analytic Stories included with Splunk Security via ES Use Case Library or Splunk Security Essentials.

Is there a particular reason why this is stated?

This is sort of getting confusing as to which would be the best app to leverage the use cases/analytical stories.

[lkutch_splunk · Accepted solution]

 ES Content Update app got a UI update and some parts have been removed, as mentioned in Release Notes:

• https://docs.splunk.com/Documentation/ESSOC/3.21.0/RN/Enhancements 
• https://docs.splunk.com/Documentation/ESSOC/3.22.0/RN/Enhancements

If you already have Enterprise Security, then it's easiest to see them in the Use Case Library: 

https://docs.splunk.com/Documentation/ES/6.5.1/Admin/Usecasecontentlibrary

If you don't already have Enterprise Security, then you can use Security Essentials as a first step in your security journey & see them in there.