3/29/2024 0 Comments Splunk enterprise security admin![]() In the Condition field, type a conditional statement that will evaluate to either true or false.(Optional) Click Configure Zones to build a clause and specify a condition.This word auto-populates in the cim_entity_zone fields if you do not specify your own values when formatting an asset or identity list as a lookup. Type a lowercase word to use as a default zone name.Use the toggle to enable for Assets or Identities.Scroll to the Enable Zones for Assets or Identities panel.From the menu bar, select Configure > Data Enrichment > Asset and Identity Management.Įnable entity zones in the global settings as follows: Configure a new asset or identity list in.Format the asset or identity list as a lookup in.Collect and extract asset and identity data in.Perform the following prerequisite tasks before starting on these settings: You can enable entity zones in situations when you have mergers or acquisitions with other companies, for example, and you have similar IP address spaces that you need to keep separate. Enable entity zones for assets and identities inĮntity zones are disabled for assets and identities by default.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |