Splunk Enterprise Security: What is CIM, data model, and Tag?

[vijaysri]

Hi,

What is CIM, data model, Tag

If sppose I am integrating antivirus related logs to splunk what role does CIM play here?

What can I do with CIM?

[jkat54 · Accepted solution]

Use the documentation:

https://docs.splunk.com/Documentation/CIM/4.14.0/User/Overview

https://docs.splunk.com/Documentation/Splunk/8.0.1/Knowledge/Aboutdatamodels#What_is_a_data_model.3F

https://docs.splunk.com/Documentation/Splunk/8.0.1/Knowledge/Abouttagsandaliases

[to4kawa]

Splunk CIM malware

check this.