Predefined entity discovery sources available for the Splunk Add-on for Exposure Analytics

After you install the Splunk Add-on for Exposure Analytics, you must add predefined entity discovery sources for the add-on in Splunk Enterprise Security.

For instructions on how to add an entity discovery source, see Configuring entity discovery sources for Exposure Analytics in the Administer Splunk Enterprise Security manual.

Entity discovery source	Type	Description of the data	Required?
Cisco - Splunk Add-on for Exposure Analytics - Asset	Streaming	Includes the system, network, and user information for each asset	Yes
Cisco - Splunk Add-on for Exposure Analytics - Encryption	Scheduled	Includes the encryption data and encryption status for each asset. Add this source only if you are measuring full disk encryption on Windows assets.	No