Assets and identities provide critical context to the notable events generated by your correlation searches. Learn tips for properly configuring Splunk ES assets and identities.
Perfect for archiving data that is infrequently needed, but is still searchable by Splunk.