Hi all, I'm struggling with problem that I can't find any error logs in AssetandIdentityManagement dashboard in Splunk Enterprise Security. It shows NOT FOUND and I see the error message b...
A quick question about how the assetandidentity list is populated for Splunk ES.
I can see it is happening from a IdentityManagement modular input under (with associated python scripts)
S...
Has anyone encountered this issue and how did you fixed it on Splunkcloud and Enterprise Security "Identity: An error occurred while the AssetandIdentityManagement modular input ran" ?&n...
The changes of the data source are not immediately reflected and some old information remains for several minutes.
How the content updates works? cron ? or Or is each data source combined and...
I need help with adding an asset input stanza for the lookup source. I created a sample lookup that has the proper headers andand set it up to share with the app however I can’t seem to get my l...
Identity: 314 assets are currently exceeding the field limits set in the AssetandIdentityManagement page. Data truncation will occur unless the field limits are increased. Sources: [merge].
...ssue. Is there a way to find the exact instance where this limit is being exceeded? Identity: 25 assets are currently exceeding the field limits set in the AssetandIdentityManagement page. Data t...
...s being used by Enterprise security assetandidenty managment. We desire to put in priority for these assets. Now when we do this manually, via lookup editor, next time the scheduled search r...
Hi Guys, We use enterprise security and we have configured assetandidentity list. From the global option "AssetandIdentityManagement" we have enabled merge assetandidentities f...
...bsp;assets.csv andidentities.csv lookup table under 'IdentityManagement : OK These lookup table is in 'Enabled' state : OK Why this behavior occurred? and how make it to take r...