All Apps and Add-ons
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
Ask a Question

I am creating an app in splunk with the concept of CIM in splunk and I am facing following challege for some use cases

chandra1347215
New Member
‎02-22-2018 03:53 AM
  1. Some windows fields are not there in the Authentication datamodel like EventCode and logon_type.
  2. I don't know how to map these windows fields in datamodel to get the data to get the benefit of data acceleration.

Please clarify these challenges if anyone know here.

Tags (1)
0 Karma
Reply
Get Updates on the Splunk Community!

Wondering How to Build Resiliency in the Cloud?

IT leaders are choosing Splunk Cloud as an ideal cloud transformation platform to drive business resilience,  ...

Updated Data Management and AWS GDI Inventory in Splunk Observability

We’re making some changes to Data Management and Infrastructure Inventory for AWS. The Data Management page, ...

Introducing the Splunk Community Dashboard Challenge!

Welcome to Splunk Community Dashboard Challenge! This is your chance to showcase your skills in creating ...