Manuals
Splunk® Common Information Model Add-on

The Common Information Model (CIM) is a set of field names and tags that are expected to define the lowest common denominator of a domain of interest. You can map a new data source to the proper interface, validate that the domain interface has the expected data, and start writing or using an app that expects that domain interface.

Common Information Model Add-on Manual
How to install and use the Splunk Common Information Model Add-on