- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
CIM complaince indexes list
saikiran334
Explorer
05-04-2020
10:42 AM
I am wondering is there any method to list out CIM compliance indexes on demand through SPL query ?
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content

richgalloway

SplunkTrust
05-04-2020
11:57 AM
If you're looking for the indexes related to the CIM app then you can use REST.
| rest /services/data/indexes | search title="cim_*" | dedup title
If you're looking for indexes that are CIM compliant, well, there is no such thing. Individual events can be CIM-compliant, but not an index itself.
---
If this reply helps you, Karma would be appreciated.
If this reply helps you, Karma would be appreciated.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
PavelP
Motivator
05-04-2020
11:27 AM
Hello @saikiran334
please check this app: https://splunkbase.splunk.com/app/2968/ SA-cim_validator
Let me know if it is what you're looking for
