Knowledge Management

CIM complaince indexes list

saikiran334
Explorer

I am wondering is there any method to list out CIM compliance indexes on demand through SPL query ?

Tags (2)
0 Karma

richgalloway
SplunkTrust
SplunkTrust

If you're looking for the indexes related to the CIM app then you can use REST.

| rest /services/data/indexes | search title="cim_*" | dedup title

If you're looking for indexes that are CIM compliant, well, there is no such thing. Individual events can be CIM-compliant, but not an index itself.

---
If this reply helps you, Karma would be appreciated.
0 Karma

PavelP
Motivator

Hello @saikiran334

please check this app: https://splunkbase.splunk.com/app/2968/ SA-cim_validator

Let me know if it is what you're looking for

alt text

0 Karma
Get Updates on the Splunk Community!

Splunk Mobile: Your Brand-New Home Screen

Meet Your New Mobile Hub  Hello Splunk Community!  Staying connected to your data—no matter where you are—is ...

Introducing Value Insights (Beta): Understand the Business Impact your organization ...

Real progress on your strategic priorities starts with knowing the business outcomes your teams are delivering ...

Enterprise Security (ES) Essentials 8.3 is Now GA — Smarter Detections, Faster ...

As of today, Enterprise Security (ES) Essentials 8.3 is now generally available, helping SOC teams simplify ...