Install the add-on

This section describes where to get the Splunk Common Information Model Add-on and what you need to do to install and configure it.

Note: The CIM app may be bundled with some applications, and therefore may already be in place in your system. Versions older than 3.0.0 are not implemented as Splunk 6 datamodels and are not considered compatible. The package name has been changed to prevent accidental upgrades.

Download the add-on

Data models implementing the Common Information Model are available as part of the Splunk_SA-CIM add-on available on Splunk Apps. Download the Splunk_SA-CIM Add-on from Splunk Apps to your desktop or local directory.

Install

To install the Splunk_SA_CIM add-on, click Manage Apps on the Splunk Home page. Click Install app from file and browse to the location of the Splunk_SA_CIM add-on in your local directory or desktop. If you are upgrading to a newer version of the add-on, be sure to check the Upgrade option to overwrite your existing version.

Once the Common Information Model add-on is installed, there is no further configuration you need to do, unless you want to accelerate any of the data models.

Note: The data models included in the Splunk_SA_CIM add-on are configured with data model acceleration turned off. See "Enable data model acceleration" in the core Splunk documentation for more details.