Splunk Enterprise Security

What are the CIM fields created by the Windows TA?

ndcl
Path Finder

Hi,

I´m looking for a list of all CIM fileds that are created by the Windows TA... I can´t find any doku...

 

Thanks for the Help!

Labels (2)
Tags (3)

richgalloway
SplunkTrust
SplunkTrust

CIM fields are documented at https://docs.splunk.com/Documentation/CIM/4.17.0/User/Overview .  Any app that claims to be CIM-compliant will create fields listed in this manual.

---
If this reply helps you, Karma would be appreciated.

ndcl
Path Finder

Yes, sure... but that was not the question. I only need the fields created by the Splunk_TA_windows. Not all CIM fields... 

0 Karma
Get Updates on the Splunk Community!

Introducing New Splunkbase Governance!

Splunk apps are essential for maximizing the value of your Splunk Experience. Whether you’re using the default ...

Splunk Edge Processor | Popular Use Cases to Get Started with Edge Processor

Splunk Edge Processor offers more efficient, flexible data transformation – helping you reduce noise, control ...

3 Ways to Make OpenTelemetry Even Better

My role as an Observability Specialist at Splunk provides me with the opportunity to work with customers of ...