Exposure Analytics dashboards

overview of exposure analytics views

Exposure analytics empowers security analysts to prioritize and focus investigations, report on security control deficiencies, and proactively reduce the attack surface.

For additional details about Exposure Analytics, see Overview of Exposure Analytics in the Administer Splunk Enterprise Security manual.

Exposure analytics dashboards are divided by functional area. Follow the links to learn more about each dashboard.

• Entity discovery: Report on the asset, user, IP address, and MAC address entities that are continuously discovered on your network.

  • Entity discovery insights

  • Entity discovery inventory

  • Entity analysis

• Entity posture: Gain proactive visibility into your organizational security posture and understand the gaps in your security controls.

  • Entity posture insights and matrix

• Entity profile: Report on the contextual risk of your entities, based on the configured profile rules.
  • Entity profile insights
• Diagnostics
  • Exposure analytics diagnostics

• Entity actions: Take action on any entity discovery filter, posture metric, or profile rule to help remediate security issues or increase visibility.

  • See Configure entity actions in the Administer Splunk Enterprise Security manual.

• Diagnostics

  • Exposure analytics diagnostics

Export a report

To export a report from any of the Exposure Analytics dashboards, complete the following steps:

1. Navigate to any of the dashboards, In any section with a table, select the download icon ( ).
2. Enter a name for the file.
3. Select an Output format, such as JSON or CSV.
4. Select Download.