How to normalise the fields via OCSF

[NAGA4]

Has anyone implemented OCSF model in your Splunk security practise. Got a rough idea in this and about to start the adoption of OCSF in our platform. As of now only identified the fields as per OCSF MODEL. Yet few fields are missing still. How to check for new fields if it is yet to introduce in OCSF model. Any pros and cons on implementing this. And any tips would be helpful based on real time implementation. Thanks in advance

[PickleRick]

There is an addon apparently providing translation layer from OCSF to CIM - https://apps.splunk.com/app/6841/ (most Splunk solutions use CIM so the direction here is obvious).

I haven't used it though.