Create risk and edit risk objects in Splunk Enterprise Security
As an ES Admin, you can create and edit risk objects.
Create a new risk object
- From the Enterprise Security menu, select Configure > Content Management.
- From the Type drop-down filter, select Lookup.
- (Optional) In the Search filter, type
risk object types
. - Select the Risk Object Types list.
- Highlight the last risk_object_type cell in the table and right-click to see the table editor.
- Insert a new row into the table.
- Double-click in the new row to edit it, then add the new object type name.
- Save the changes.
Edit an existing risk object
- From the Enterprise Security menu, select Configure > Content Management.
- From the Type drop-down filter, select Lookup.
- (Optional) In the Search filter, type
risk object types
. - Select the Risk Object Types list.
- Highlight the risk object type and change the name.
- Save the changes.
Manage internal lookups in Splunk Enterprise Security | Configure general settings for Splunk Enterprise Security |
This documentation applies to the following versions of Splunk® Enterprise Security: 5.0.0, 5.0.1
Feedback submitted, thanks!