When installing Enterprise Security, what should be done after installing the add-ons necessary for normalizing data?
When installing Enterprise Security, what should be done after installing the add-ons necessary for normalizing data?
After installing add-ons necessary for normalizing data in Enterprise Security, it is important to configure the add-ons according to their README or documentation. This ensures that they are set up correctly and functioning as intended, which may involve setting up data inputs, configuring source types, and applying any necessary customizations specific to the add-on.
last step regarding add-ons : Set up a Splunk data input and confirm the source type settings: The README file of the add-on includes information about the source type setting associated with the data, and might include customization notes about configuring the input.