You can use the Content Management page to display, configure, and edit the correlation searches, key indicators, saved searches, and swim lane searches unique to Splunk Enterprise Security.
- See Configuring correlation searches for more on configuring and modifying correlation searches.
- See Creating new content in Splunk Enterprise Security for more on creating or modifying correlation searches, key indicators, saved searches, and swim lane searches.
- See Export content as an app from Splunk Enterprise Security for more on exporting content from the Content Management page.
Configure lists and lookups
This documentation applies to the following versions of Splunk® Enterprise Security: 4.5.0, 4.5.1, 4.5.2, 4.5.3, 4.6.0 Cloud only