All,
Is there an existing data model or CIM standard for $$ related items? In an existing app or what not? Would rather take someone else's work here than have to reinvent the wheel.
thanks
-Daniel
The splunk CIM app is for free. (right here) It will help you quite a bit. That's the good news.
However, most certainly, your data won't comply completely out of the box. For every not-so-standard logfile, you'll have to make it fit for yourself. If you don't want to do it yourself, or if you don't have the time to do it, you always can ask splunk Professional Services to do it for you.
The splunk CIM app is for free. (right here) It will help you quite a bit. That's the good news.
However, most certainly, your data won't comply completely out of the box. For every not-so-standard logfile, you'll have to make it fit for yourself. If you don't want to do it yourself, or if you don't have the time to do it, you always can ask splunk Professional Services to do it for you.