- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
matstap
Communicator
02-07-2019
02:53 PM
I haven't been able to find an answer to this in the documentation. Can you add data models to the Splunk Common Information Model (CIM) app? Or do you always have to use one of the default data models?
1 Solution
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
chrisyounger

SplunkTrust
02-07-2019
02:56 PM
You are allowed to create your own data models if you want. Its good to stick with the CIM models where possible because there are many searches that already use them.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
chrisyounger

SplunkTrust
02-07-2019
02:56 PM
You are allowed to create your own data models if you want. Its good to stick with the CIM models where possible because there are many searches that already use them.
