Common Information Model (CIM)

Common Information Model (CIM)

noun

A set of preconfigured data models that you can apply to your data at search time. Each data model in the CIM consists of a set of field names and tags that define the least common denominator of a domain of interest. The CIM lets you normalize your data to match a common standard, using the same field names and event tags for equivalent events from different sources or vendors.

For more information

See the Common Information Model Add-on Manual.

Download the Common Information Model add-on from Splunkbase:

• Splunk Common Information Model