The Sidewinder Add-on for Splunk adds the required knowledge objects to make Sidewinder Event Format (SEF) log data from Forcepoint Sidewinder (formerly McAfee Firewall Enterprise) appliances CIM-compliant for use with other Splunk Apps such as the Splunk App for Enterprise Security.