Manage filters in Splunk Asset and Risk Intelligence

You can modify and delete any saved filters from the Saved filter management page of Splunk Asset and Risk Intelligence. For example, if a user created a filter for particular assets discovered by Splunk Asset and Risk Intelligence on the Asset discovery dashboard, you can narrow or expand the scope of that filter.

Manage filters

To manage filters, complete the following steps:

  1. In Splunk Asset and Risk Intelligence, select Admin and then Saved filter management.
  2. Locate the filter you want to modify or delete in the filter table.
  3. To modify the filter, select the settings icon ( settings ).
    1. Make your changes.
    2. Select Update.
  4. To delete a filter, select the delete icon ( remove ).