Splunk Asset and Risk Intelligence is not compatible with Splunk Enterprise 9.1.2 due to known issues SPL-237796, SPL-248319 where search results in "results" have more rows than expected. Upgrade to Splunk Enterprise 9.1.3 to use Splunk Asset and Risk Intelligence.
Initialize data for Splunk Asset and Risk Intelligence
To populate initialization data and begin using Splunk Asset and Risk Intelligence, you must verify a few configurations using the install and upgrade helper. To initialize data, complete the following steps:
- In Splunk Asset and Risk Intelligence, select Admin, then select Install and upgrade helper.
- In the Initialize a new install section, select Check data for Permissions, Internal lookups, and Enrichment rules. Checking this data verifies and populates all the internal lookups and enrichment rules for Splunk Asset and Risk Intelligence.
After you complete these steps, the Check data dialogue box displays "Success".
Next step
Set up roles and capabilities for Splunk Asset and Risk Intelligence
Last modified on 05 August, 2024
| Create indexes for Splunk Asset and Risk Intelligence | Set up roles and capabilities for Splunk Asset and Risk Intelligence |
This documentation applies to the following versions of Splunk® Asset and Risk Intelligence: 1.0.0, 1.0.1
Download manual
Feedback submitted, thanks!