https://community.splunk.com/t5/Knowledge-Management/Can-you-add-data-models-to-the-Splunk-Common-Information-Model/m-p/376190#M3207 <P>I haven't been able to find an answer to this in the documentation. Can you add data models to the Splunk Common Information Model (CIM) app? Or do you always have to use one of the default data models?</P> Thu, 07 Feb 2019 22:53:56 GMT matstap 2019-02-07T22:53:56Z https://community.splunk.com/t5/Knowledge-Management/Can-you-add-data-models-to-the-Splunk-Common-Information-Model/m-p/376190#M3207 <P>I haven't been able to find an answer to this in the documentation. Can you add data models to the Splunk Common Information Model (CIM) app? Or do you always have to use one of the default data models?</P> Thu, 07 Feb 2019 22:53:56 GMT https://community.splunk.com/t5/Knowledge-Management/Can-you-add-data-models-to-the-Splunk-Common-Information-Model/m-p/376190#M3207 matstap 2019-02-07T22:53:56Z https://community.splunk.com/t5/Knowledge-Management/Can-you-add-data-models-to-the-Splunk-Common-Information-Model/m-p/376191#M3208 <P>You are allowed to create your own data models if you want. Its good to stick with the CIM models where possible because there are many searches that already use them.</P> Thu, 07 Feb 2019 22:56:42 GMT https://community.splunk.com/t5/Knowledge-Management/Can-you-add-data-models-to-the-Splunk-Common-Information-Model/m-p/376191#M3208 chrisyounger 2019-02-07T22:56:42Z