How does Tenable Add-on deal with duplicate data? In other words, if we do not run a scan, then there is no new data. Will Tenable Add-on bring in duplicate data, or nothing at all?
The whole design of the app is to duplicate as little data a possible.
Given the basic design above we rely on splunk deduping functionality on event creation to see events are identical and not create duplicate events if for some reason duplicate data happens during a differential pull, which is very rare it could even happen.
The whole design of the app is to duplicate as little data a possible.
Given the basic design above we rely on splunk deduping functionality on event creation to see events are identical and not create duplicate events if for some reason duplicate data happens during a differential pull, which is very rare it could even happen.
Thank you! This was very helpful