Security Operations Shows “Search is waiting for input”
Symptom: When upgrading an older version of the app, the Security Operations panels do not display graphs. Instead, they display "Search is waiting for input ...".
Cause: Old dashboard files are stored locally on the Splunk server.
Fix:
Delete the
$SPLUNK_HOME/etc/apps/IllumioAppforSplunk/localfolder.Restart Splunk.