What's new in Splunk Asset and Risk Intelligence

Version 1.1.3

Splunk Asset and Risk Intelligence version 1.1.3 is a maintenance release and was released on June 20, 2025. See Fixed issues.

Version 1.1.2

Splunk Asset and Risk Intelligence version 1.1.2 is a maintenance release and was released on May 14, 2025. See Fixed issues.

Version 1.1.1

Splunk Asset and Risk Intelligence version 1.1.1 was released on March 6, 2025 and includes the following new enhancements:

Feature Description
Customizable home pageCustomize your asset overview in the Home dashboard. You can opt to show risk scoring charts, select which asset types to see, and manage the display of metrics. See Customize the home page.
Improvements to discovery workflowsCreate a filter for both discovery reports and risk scoring rules, see discovered assets, IP addresses, and MAC addresses all in one place, and find more details on software and vulnerabilities. See Review discovery reports on assets and identities.
New OT insights dashboardFind visualizations with data on active OT devices, including details such as device class, vendor, subnets and overall activity. See Use insight dashboards to review reports on systems and accounts associated with discovered assets.
Improvements to investigation workflowsSee more details on risk and detection activity while investigating an asset or identity. See Investigate assets and identities.
Improvements to the Splunk Enterprise Security integrationAfter an admin activates the integration, use Splunk Asset and Risk Intelligence workflow actions, risk factors, and asset and identity context in Splunk Enterprise Security version 7.x or 8.x. See Use Splunk Asset and Risk Intelligence data with Splunk Enterprise Security and Activate integration with Splunk Enterprise Security.
Improvements to risk dashboards and new asset and identity metric matricesFind more details on risk and frameworks, organize dashboards by split-by fields, and review metric compliance by asset or identity. See Assess risk using metrics and Review framework dashboards and risk scoring insights.
Simplified process for adding data sourcesSee more information on known data sources, spread data processing for batched sources, choose to merge or overwrite data when adding custom sources, and reset priorities at the field level. See Add or modify a data source and Create and modify event searches.
Improvements to the ServiceNow integrationAdd multiple ServiceNow instances to Splunk Asset and Risk Intelligence and push data to import set tables from different environments. See Integrate ServiceNow data with Splunk Asset and Risk Intelligence data.
Simplified process for adding metrics, exceptions, and risk scoring rulesSet metric exception expiry, split a metric by a particular field, add a metric for multiple data sources, and test metric logic while you edit. See Create and manage metrics, Create and manage risk scoring rules, and Add metric exceptions.
Simplified process for adding frameworksFind more known frameworks and automatically map to your selected metrics. See Create and manage cybersecurity frameworks.
Improvements to operational health and audit dashboardsFind health statuses for processing searches, and audit data sources to find how much each source contributes to each inventory field. See Monitor, export, and share audit data.
Simplified process for installing and upgradingUse the post-install configuration to initialize data, and easily manage capabilities for Splunk Asset and Risk Intelligence

admin and analyst roles. See Initialize data for Splunk Asset and Risk Intelligence, Set up roles and capabilities, and Upgrade Splunk Asset and Risk Intelligence.