#
Enable asset correlation
Confirm asset correlation has been setup in Enterprise Security.
- Navigate to Enterprise Security > Configure > Data Enrichment > Asset and Identity Management.
- Switch to the "Correlation Setup" tab.
- Either enable for all sourcetypes (Recommended) or selectively by sourcetype.
- If you choose to enable select sourcetypes, ensure the
stash
sourcetype is also selected so Notable events will be enriched with asset information.
- If you choose to enable select sourcetypes, ensure the
- Save.
#
Disable existing asset sources
Optional
It may be possible that you have existing Asset Lookups defined. If Rapid7 is considered your "single source of truth" in your environment the existing lookups may no longer be needed.