Enterprise Security: where is the CIM compatibility breakdown per sourcetype for Splunk_TA_symantec-ep?

[danielbb]

Looking at Splunk_TA_symantec-ep and I wonder where the documentation for the sourcetypes, which are CIM compliant, is.

[harsmarvania57 · Accepted solution]

Hi,

Here you go https://docs.splunk.com/Documentation/AddOns/released/SymantecEP/Sourcetypes , that has each source type mapped with CIM datamodels.