The library consortium's Enterprise Security Web domain dashboard is empty, while the Access domain shows staff logons. What is the most likely data-source assessment?
Select an answer to reveal the explanation.
Short Explanation
One full dashboard and one empty dashboard is a coverage X-ray. Access is getting identity logs; Web is not getting a mapped proxy feed. That is a data or CIM gap, not a law of library science.
Full Explanation
Security Domain dashboards double as a data-source assessment: an empty Web domain usually means the proxy, web gateway, or equivalent sourcetype is absent or not mapped to the Web data model. A populated Access domain shows that identity collection can work, so the Web gap is specific rather than a platform outage. CPU exhaustion and ransomware notables are not how ES hides a single domain. Onboard or CIM-map the web source.