Splunk ITSI Module for Cloud Services data model reference table

Use the below tables as a reference for the data models of this module. The tables contain a breakdown of the required tags for the event objects or searches in that model, and a listing of all extracted and calculated fields included in the model. Data models can be edited by navigating to Settings > Data models

For information on how to map your data to the data models available in the Splunk IT Service Intelligence Modules, see the below links:

• How to use these reference tables in the Common Information Model Add-on Manual.
• About data models in the Splunk Enterprise Knowledge Manager Manual.

Tags used with event objects

The following tags act as constraints to identify your events as being relevant to this data model.

Object name	Tag name (Constraint)	Tag name (Inherited)
Performance	cloud_*, performance
|_Virtual Machine	cloud_virtualization, virtualmachine	cloud_*, performance
|____ CPU	cpu	cloud_*, performance, cloud_virtualization, virtualmachine
|____ Network	network	cloud_*, performance, cloud_virtualization, virtualmachine
Inventory	cloud_*, inventory
|____ Virtual Machine	cloud_virtualization, virtualmachine	cloud_*, inventory

Fields for Cloud Services Module event objects

The following table lists the extracted and calculated fields for the event objects in the model. Note that it does not include any inherited fields.

Object name	Field name	Data type	Description
Performance	tag	String	Tag.
Virtual Machine	network_usage	Number	Total of network_usage_in + network_usage_out.
Virtual Machine	vm_id	String	Unique Identifier (UUID) for virtual machine.
CPU	cpu_load_percent	Number	CPU load in percentage
Network	network_packets_in	Number	The volume of incoming traffic in terms of the number of packets on a single instance.
Network	network_packets_out	Number	The volume of outgoing traffic in terms of the number of packets on a single instance.
Network	network_usage_in	Number	Volume of incoming network traffic, in bytes, to an application on a single instance.
Network	network_usage_out	Number	Volume of outgoing network traffic, in bytes, to an application on a single instance.
Inventory	custom_tag	String	Customer defined tags.
Inventory	tag	String	Tag.
Inventory	vendor	String	Vendor name of the virtualization software.
Inventory	vendor_product	String	Vendor-given official name for the virtualization software.
Inventory	role	String
Virtual Machine	account_id	String	Unique identifier for the cloud service account.
Virtual Machine	cpu_cores	Number	Count of CPU cores available on the system.
Virtual Machine	hypervisor_name	String	Name of the hypervisor.
Virtual Machine	ip	String	IP address of the system.
Virtual Machine	mem_capacity	Number	Total memory capacity in bytes.
Virtual Machine	power_state	String	Current power status of Virtual Machine (example: poweredOn or poweredOff).
Virtual Machine	region	String	Geo location where the virtual machine is hosted.
Virtual Machine	storage_capacity	Number
Virtual Machine	virtual_network_id	String	The virtual network to which the virtual machine belongs.
Virtual Machine	virtual_subnet_id	String
Virtual Machine	vm_id	String	Unique Identifier (UUID) for virtual machine.
Virtual Machine	vm_name	String	Name of virtual machine.
Virtual Machine	vm_size	String