app ES Content Updates disable - Splunk Community

Splunk Enterprise Security

Hi,

Will disable the app (ES Content Updates) affect the functionality of Enterprise Security?

Thanks

Regards

Maybe. All knowledge objects in the ESCU app will be disabled so any app (including ES) that tries to use them likely will fail.

---
If this reply helps you, Karma would be appreciated.

Get Updates on the Splunk Community!

Best Practices: Splunk auto adjust pipeline queue

When you enable autoAdjustQueue in Splunk, maxSize should be understood as the queue size Splunk starts with ...

Announcing Modern Navigation: A New Era of Splunk User Experience

We are excited to introduce the Modern Navigation feature in the Splunk Platform, available to both cloud and ...

Request for Professional Development: Attending .conf26

Winning Over the Boss: Your Pass to .conf26 conf26 is going to be here before you know it. If don't already ...