Splunk CIM (PART-3) : How to validate CIM compatibility and generate report

[@CarvalhoFilho753]

Hello, thank you for sharing your knowledge with us!

[@anldori]

Thank you so much!

[@hamiltonian4698]

Why does my sourcetype not show up in the CIM validation?

[@valishaik9209]

Hi sir, you are making nice videos sir, I am requesting to you sir, please make the videos Troubleshooting and splunk log analysis.

[@TheAychi]

Thank you

[@saby826]

Can we expect splunk security related videos?

[@Sandeep223358]

Can we expect Splunk ITSI tutorials in near time??

[@splunk_ml]

Hi Sanddep,
ITSI is not a free app and its license cost is huge. Thats why I am not able to cover it :(

[@Sandeep223358]

Splunk & Machine Learning Yeah understand thanks for reply.

[@simple-security]

How about a video to show how to validate you've installed the correct apps and add-ons on both the SH and the UF?
And challenges with installing apps/addons on clustered search heads.
It seems to me it's a waste of time doing CIM validation if there are apps you can install that have already done it, but you didn't know they exist. eg. good luck taking any json input and making it CIM compliant w/o a lot of work - better to know how to verify there is an app/add-on that has already done it for you.

[@splunk_ml]

yes this is good point. I just covered what is available out of the box functionality in splunk enterprise. I will definitely try to cover other splunkbase apps which provides this feature automatically.

[@manan4436]

We can also validate using.
New splunk plugin for pytest..
Pytest-splunk-addon
pypi.org/project/pytest-splunk-addon/

[@harshpatel105]

That's the project on which our team is working on :)