Known data sources available for the Splunk Add-on for Asset and Risk Intelligence
After you install the Splunk Add-on for Asset and Risk Intelligence, you must add data sources for the add-on in Splunk Asset and Risk Intelligence.
For instructions on how to add a data source, see Add or modify a data source in Splunk Asset and Risk Intelligence in the Administer Splunk Asset and Risk Intelligence manual.
Note: In order for added data sources to begin aggregating data, you must activate them and set a priority.
The following table lists the known data sources available for the Splunk Add-on for Asset and Risk Intelligence:
| Data source name | Type | Description of the data | Required? |
|---|---|---|---|
| Splunk Add-on for Asset and Risk Intelligence - Asset | Real-time | Includes the system, network, and user information for each asset | Yes |
| Splunk Add-on for Asset and Risk Intelligence - Software | Real-time | Includes the installed software products for each asset | Yes |
| Splunk Add-on for Asset and Risk Intelligence - Encryption | Batched | Includes the encryption data and encryption status for each asset. You can use the encryption data source for the full disk encryption metric. See Create and manage metrics in Splunk Asset and Risk Intelligence in the Administer Splunk Asset and Risk Intelligence manual. | No |
Note: Add the encryption data source only if you're measuring encryption on Windows assets.