Initialize data for Splunk Asset and Risk Intelligence
Note:
Splunk Asset and Risk Intelligence is not compatible with Splunk Enterprise 9.1.2 due to known issues SPL-237796, SPL-248319 where search results in "results" have more rows than expected. Upgrade to Splunk Enterprise 9.1.3 to use Splunk Asset and Risk Intelligence.
To populate initialization data and begin using Splunk Asset and Risk Intelligence, you must verify a few configurations using the install and upgrade helper. To initialize data, complete the following steps:
- In Splunk Asset and Risk Intelligence, select Admin, then select Install and upgrade helper.
- In the Initialize a new install section, select Check data for Permissions, Internal lookups, and Enrichment rules. Checking this data verifies and populates all the internal lookups and enrichment rules for Splunk Asset and Risk Intelligence.
After you complete these steps, the Check data dialogue box displays "Success".