splunk / splunk/rba

[Issue]: Risk Attribution (Investigative View) Errors

Open
#105 2 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

bug
Dominant language
No language data
Stars
67
Forks
12
PR merge metrics
No merged PRs in 30d

Description

Description

The dashboard shows errors for some panels and seems to expect lookups that don't seem to be provided as part of this Github/app.

image

When Show Attack Web is selected, a similar error is displayed:

image

Related links

Contributor guide

No contributing guide indexed for this repository

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start by reproducing the errors in the Risk Attribution dashboard, including the panels shown and the Show Attack Web view. Compare the lookups requested by those views with the lookups provided in the app; done means the affected panels render without missing-lookup errors.

Written by the indexing model from the issue text.

Assessment

Domain
security
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.