Splunk App for PCI compliance - Splunk Enterprise: Is there an option to automatically update the assets and identities lookups without running an LDAP search?

[amulay26]

I have the assets and identities list configured using LDAP search. Is there an option to automatically update the assets and identities lookups without running that LDAP search?

Any insights will be appreciated.

Thanks

[rvany]

These lists are lookup tables. You could update them just like any other lookup table - but, somehow you have to get the data. LDAP is one option for identities, CMDB is one option for assets.