This release of the Common Information Model Add-on contains new datamodels for Email, Database, Ticket Management, and Interprocess Messaging. It also contains expansions of the existing Authentication, Performance, Intrusion Detection/Prevention, Vulnerability, and Network Sessions datamodels.
- Inconsistency between URI and URL in Web datamodel. (CIM-85)
The following issues have been resolved in this release:
- Network Traffic's DNS object doesn't detect mDNS traffic. (CIM-152)
- Authentication datamodel should set "app" field better (CIM-116)
This documentation applies to the following versions of Splunk® Common Information Model Add-on: 4.0.0