Splunk Enterprise Security

Can I create out of box use cases from Splunk CIM data models ?

jm1
New Member

Is it possible to use data models from Common Information Model to use cases in splunk, if so, how can we do that 

Tags (1)
0 Karma

richgalloway
SplunkTrust
SplunkTrust

Yes, it is possible.  That is a big part of what makes Enterprise Security work.  You can examine existing correlation searches to see how they use datamodels for various use cases.

---
If this reply helps you, Karma would be appreciated.
0 Karma
Get Updates on the Splunk Community!

Enter the Splunk Community Dashboard Challenge for Your Chance to Win!

The Splunk Community Dashboard Challenge is underway! This is your chance to showcase your skills in creating ...

.conf24 | Session Scheduler is Live!!

.conf24 is happening June 11 - 14 in Las Vegas, and we are thrilled to announce that the conference catalog ...

Introducing the Splunk Community Dashboard Challenge!

Welcome to Splunk Community Dashboard Challenge! This is your chance to showcase your skills in creating ...