Description:
Datamodels are not showing the raw fields of the sourcetype. They only display the CIM fields.
Goal:
To display the related sourcetype fields not included in the CIMmodel....
The Cisco ACI Add-on for Splunk Enterprise provides these sourcetypes:
cisco:apic:health
cisco:apic:stats
cisco:apic:class
cisco:apic:authentication
And is Common Information Model (CIM) 4...
...owtousethesereferencetables , I open "Settings: (Knowledge) Datamodels" (the DataModel Editor) and then click on the JVM datamodel. I get a nasty 404 error:
404 Not Found
[Return to Splunk home p...
All,
Can someone talk to me about how Splunk want's the term "severity" used?
Should I be logging out my errors using Splunk's CIM value severity from my app for the best compatibility with S...
...elieve that is how it should be done.
My understanding is that each type of source (Windows event logs, IIS logs, webshere java logs, etc) will have a forwarder that can be configured.
I have n...
A number of applications and services in our environment use LOG4J for logging. Is there a CIM (Common Information Model) for LOG4J log types - or perhaps just the accepted / standardized field n...