Common Information Model (CIM)

Common Information Model (CIM)


A set of preconfigured data models that you can apply to your data at search time. Each data model in the CIM consists of a set of field names and tags that define the least common denominator of a domain of interest. The CIM lets you normalize your data to match a common standard, using the same field names and event tags for equivalent events from different sources or vendors.

For more information

Download the Common Information Model add-on from Splunkbase: