Re: What are the CIM fields created by the Windows... - Splunk Community

Splunk Enterprise Security

Hi,

I´m looking for a list of all CIM fileds that are created by the Windows TA... I can´t find any doku...

Thanks for the Help!

CIM fields are documented at https://docs.splunk.com/Documentation/CIM/4.17.0/User/Overview . Any app that claims to be CIM-compliant will create fields listed in this manual.

---
If this reply helps you, Karma would be appreciated.

Yes, sure... but that was not the question. I only need the fields created by the Splunk_TA_windows. Not all CIM fields...

Get Updates on the Splunk Community!

Detecting Brute Force Account Takeover Fraud with Splunk

This article is the second in a three-part series exploring advanced fraud detection techniques using Splunk. ...

Buttercup Games: Further Dashboarding Techniques (Part 9)

This series of blogs assumes you have already completed the Splunk Enterprise Search Tutorial as it uses the ...

Buttercup Games: Further Dashboarding Techniques (Part 8)

This series of blogs assumes you have already completed the Splunk Enterprise Search Tutorial as it uses the ...