Skip to main content
Lantern Home
 
 
Splunk Lantern

Getting started with Splunk Asset and Risk Intelligence

  1. Last updated
  2. Save as PDF

 

This guide is designed to help you make the most of your investment in Splunk Asset and Risk Intelligence and to make improvements on your configuration to ensure you receive maximum value.

Asset and identity visibility is a critical capability that continues to create headaches for many organizations. Protecting devices and accounts that you can’t see is a challenge and opens companies to threats, risks, and compliance violations. The significance of asset and identity visibility can’t be overstated and is critical in building a resilient organization.

Splunk Asset and Risk Intelligence is a security application that continuously discovers and updates asset information by utilizing the rich data in the Splunk platform. Leveraging the asset and intelligence data within Splunk Asset and Risk Intelligence allows you to:

  • Enhance visibility: Enable the correlation and aggregation of data from various data sources to provide a continually updated inventory of assets and identities. Eliminate duplicate or stale data for more accurate and comprehensive asset insights, reducing risk exposure.
  • Perform accurate, less time consuming investigations: Help security operations teams easily map relationships between assets and identities and expedite investigations. Use enriched asset and identity context (for example network activity, associations, or health) for faster security incident response and investigations.
  • Optimize your compliance posture: Use the out-of-the-box and customizable dashboards and metrics to assess and enhance compliance and security posture. Use compliance framework controls to proactively identify assets that lack critical security controls.

Use Splunk Asset and Risk Intelligence to complete the following tasks:

Next step