Exposure Analytics dashboards

overview of exposure analytics views

Exposure analytics empowers security analysts to prioritize and focus investigations, report on security control deficiencies, and proactively reduce the attack surface.

For additional details about Exposure Analytics, see Overview of Exposure Analytics in the Administer Splunk Enterprise Security manual.

Exposure analytics dashboards are divided by functional area. Follow the links to learn more about each dashboard.

• Entity discovery: Includes assets, users, IP addresses, and MAC addresses on your network

  • Entity discovery insights

  • Entity discovery inventory

  • Entity analysis

• Entity posture: How entities in your inventory comply with metrics your organization defines

  • Entity posture insights and matrix

• Entity profile: The contextual risk of your entities, based on the profile rules you configure
  • Entity profile insights
• Diagnostics
  • Exposure analytics diagnostics

Export a report

To export a report from any of the Exposure Analytics dashboards, complete the following steps:

1. Navigate to any of the dashboards, In any section with a table, select the download icon ( ).
2. Enter a name for the file.
3. Select an Output format, such as JSON or CSV.
4. Select Download.