Knowledge Management

Is there any way to verify CIM compliance of an app being developed?

prabhasgupte
Communicator

Is there any way to verify whether the app being developed is CIM compliant? I came to know that, if it is CIM compliant, the Splunk ES app should be able to show data indexed by this app. BUT, the ES app is not free to download, nor a trial version is available.

What could be other way to verify compliance?

Tags (2)
1 Solution

kheli
Path Finder

Use the pivot within each data model. If u can search the events then they are CIM compliant for that data model

View solution in original post

0 Karma

rcorbisier_splu
Splunk Employee
Splunk Employee

If you haven’t seen it yet, you might want to check out the Splunk reference app with associated developer guidance that was built by a Splunk dev team. The current version covers app development topics from getting your data into Splunk Enterprise to building custom reporting through testing and packaging your app. There’s code and tests you can use and the development process is fully documented.

This is an ongoing dev effort by the team so check back often to see what’s been added. Also, feel free to post requests for future improvements and even contribute by reporting bugs or submitting pull requests.

0 Karma

kheli
Path Finder

Use the pivot within each data model. If u can search the events then they are CIM compliant for that data model

0 Karma

prabhasgupte
Communicator

Oh, that's nice! Thanks!!

0 Karma

satishsdange
Builder
0 Karma

prabhasgupte
Communicator

So, you mean to say that, if I get to see my data in those pivots, I could rest assured that it is normalized properly and that it is CIM compliant?

0 Karma
Get Updates on the Splunk Community!

.conf25 Registration is OPEN!

Ready. Set. Splunk! Your favorite Splunk user event is back and better than ever. Get ready for more technical ...

Detecting Cross-Channel Fraud with Splunk

This article is the final installment in our three-part series exploring fraud detection techniques using ...

Splunk at Cisco Live 2025: Learning, Innovation, and a Little Bit of Mr. Brightside

Pack your bags (and maybe your dancing shoes)—Cisco Live is heading to San Diego, June 8–12, 2025, and Splunk ...