The Splunk Add-on for Exposure Analytics collects enriched asset and user data from Splunk forwarder endpoints to enhance entity discovery. It gathers system, user, network, and full disk encryption information. This optional add-on can be used as an additional entity discovery source in Exposure Analytics, complementing other discovery sources with endpoint-derived enrichment data. You can deploy the Splunk Add-on for Exposure Analytics to your Splunk forwarders and then add the related entity discovery sources in Exposure Analytics to incorporate the data into entity discovery processing.