Managing content in Splunk Enterprise Security

As a Splunk Enterprise Security administrator, you can use the Content Management page to display, create, configure, and edit content that is unique to Splunk Enterprise Security, such as correlation searches, key indicators, saved searches, and swim lane searches.

• Create correlation searches in Splunk Enterprise Security
• Create and manage data models in Splunk Enterprise Security
• Create and manage key indicator searches in Splunk Enterprise Security
• Create and manage lookups in Splunk Enterprise Security
• Create and manage saved searches in Splunk Enterprise Security
• Create and manage search-driven lookups in Splunk Enterprise Security
• Create and manage swim lane searches in Splunk Enterprise Security
• Create and manage views in Splunk Enterprise Security
• Export content from Splunk Enterprise Security as an app
• Create and edit risk objects in Splunk Enterprise Security
• Create risk factors in Splunk Enterprise Security
• Manage risk factors in Splunk Enterprise Security
• Use default risk factors in Splunk Enterprise security