LICENSEWARE
Splunk Metric

Triage Agent Finding (Splunk Enterprise Security Premier)

Catalog row in Vendor License Metrics · Cited

Unit
Finding
Definition
Purchase Capacity and Limitations: Triage Agent (TA) in ES Premier is measured per finding; not available in ES Essentials.
Counting rules
Maximum 200 TA findings per day for volume, vCPU and SVC licences.
Floors / minimums
Maximum 200 findings per day.
Applies to products
  • Splunk Enterprise Security Premier
Esc