Attribute IP addresses to an asset
Attribute IP addresses to network assets or users over any time range using the IP address to asset attribution dashboard. You can discover users and network assets associated with a given IP address at any point in time.
To attribute IP addresses to an asset, complete the following steps:
- In Exposure Analytics, select Investigation from the main menu navigation bar, and then select Asset attribution.
- Select IP address to asset attribution.
- Using the drop-down list, select a time range. See Select time ranges to apply to your search in the Splunk Enterprise Search Manual.
- Enter an IP address.
- (Optional) Specify the Zone if you're utilizing IP zones. See Add IP zones to the company subnet directory in the Administer Splunk Asset and Risk Intelligence manual.
- Enter a host name or user ID.
- Select Submit.