Splunk Enterprise Security

What are the CIM fields created by the Windows TA?

ndcl
Path Finder

Hi,

I´m looking for a list of all CIM fileds that are created by the Windows TA... I can´t find any doku...

 

Thanks for the Help!

Labels (1)
Tags (3)

richgalloway
SplunkTrust
SplunkTrust

CIM fields are documented at https://docs.splunk.com/Documentation/CIM/4.17.0/User/Overview .  Any app that claims to be CIM-compliant will create fields listed in this manual.

---
If this reply helps you, Karma would be appreciated.

ndcl
Path Finder

Yes, sure... but that was not the question. I only need the fields created by the Splunk_TA_windows. Not all CIM fields... 

0 Karma
Get Updates on the Splunk Community!

Mastering Data Pipelines: Unlocking Value with Splunk

 In today's AI-driven world, organizations must balance the challenges of managing the explosion of data with ...

The Latest Cisco Integrations With Splunk Platform!

Join us for an exciting tech talk where we’ll explore the latest integrations in Cisco + Splunk! We’ve ...

AI Adoption Hub Launch | Curated Resources to Get Started with AI in Splunk

Hey Splunk Practitioners and AI Enthusiasts! It’s no secret (or surprise) that AI is at the forefront of ...