app ES Content Updates disable - Splunk Community

Splunk Enterprise Security

Hi,

Will disable the app (ES Content Updates) affect the functionality of Enterprise Security?

Thanks

Regards

Maybe. All knowledge objects in the ESCU app will be disabled so any app (including ES) that tries to use them likely will fail.

---
If this reply helps you, Karma would be appreciated.

Get Updates on the Splunk Community!

Quick connection discovery mode for forwarders

When a Splunk forwarder loses connectivity to its indexers, it does not always reconnect immediately. In many ...

Build and Launch AI Agents from Your Splunk Workflows

Register We’ve all been there: juggling alerts, runbooks, and endless manual searches. What if you could ...

Splunk Cloud Application Management in Terraform

Register On Tuesday, August 4 at 11AM PDT / 2PM EDT, we’re diving into how you can bring Infrastructure as ...