Questions related to upload data

[RaviThummala]

Hi Team,

we have some questions on uploading data.

1) Can we upload sample json/csv data with CIM compatible, can we see any demo ?

2) how to ingest network / network-traffic related sample data on splunk enterprise ?

3) Similarly looking for some more sample data related to email or mac-addr etc on splunk enterprise (trial account).

Regards
Anand

[gcusello]

Hi @RaviThummala,

CIM compatibility isn't related to a format but to technologies, so you have to identify the Add-On for your technology and use it to test CIM compliance.

If you want some sample in json format or about network traffic, you can install the Splunk Security Essentials App (https://splunkbase.splunk.com/app/3435) that gives you many searches and also all the sample data.

Beware when you use a trial license becaus you can index only until 600 MB/day, otherwise, after three exceedings you will be in violation.

Ciao.

Giuseppe