Feature Request: Splunk Common Information Model (CIM) : Interactive Logon in Authentication Data model

[koshyk]

hi,
Can you please define interactive login field within "Authentication Data Model". Currently there are no fields which can easily accommodate "interactive" or not
So even if we write a TA or correct eventtypes, there is no relevant field within CIM Auth DM to accomodate it.

[peter_krammer]

Yes please, I need this too.