The SOLACE: Splunk API CIM Model standardizes API transaction audit data within Splunk, enabling better visibility and detection of API-related attacks and vulnerabilities. This model enables the effective capture of API events which enables effective operational and security reporting. This extension to the CIM Model closes a gap in capturing important events that can be critical to an organization's security posture. This model is leveraged by the separately available SOLACE: ServiceInsights application to facilitate dozens of security use cases and operational dashboards. The model helps capture and structure detailed API information that can highlight critical security events often missed by default logging configurations. For organizations looking to extend their API security and operational capabilities, or needing further support, contact us to learn more about how our experienced team can help implement advanced API security solutions.