Exposure Analytics source types

There are 3 types of sources you can add to Exposure Analytics. Each type updates at a different frequency in the app. For a reference of the different source types, see the following table:

Source type Description
streaming A streaming source updates in Exposure Analytics within seconds of the source generating the events.
These sources contain asset-relevant events that you can search for without using search pipes in your SPL.
scheduled A scheduled source can include any of the following:
  • Events that update in real-time but have asset-related field values spread out over multiple events.
  • Events that don't update in real-time. Exposure Analytics indexes them on a schedule, such as once per day, instead.
  • Events with delayed indexing.
These sources contain asset-relevant events that require an advanced search.
static Static sources are typically asset lists from databases, CMDBs, or uploads of Microsoft Excel or CSV files. For these sources, there might not be any indication of when each asset in the list was last detected on the network. You can label these sources as Passive in Exposure Analytics.