Yes, we are planning to update the Savvius for Splunk Dashboards and make them CIM compliant. To be specific, this will require an update to just the app, not the TA's. The TA's will still send the data to Splunk in the same format, and the app will map (or transform) that data into the CIM format. That is a good thing, requiring no update to existing Savvius Insight or Omnipliance deployments that are sending data to Splunk, The main advantage of this will be that users of the Splunk for Security App will be able to see Savvius network analysis in their existing dashboards.
