Overview
In this post I'd like to cover an approach for integrating an external asset database with the Splunk App for Enterprise Security (ES). This post is relevant for people just starting out with ES or who have used it for a while and want to improve the integration of their assets information with the application.
For those wondering what an assets list is in the context of ES, it's a list containing information (such as...