Splunk Data Models - CIM Compliance

In this video, we cover basics about data models, more focus is on how to use the data models, and help you understand CIM Compliance. There will be also some tips on validating each CIM data model.

[@etaihellman4591]

amazing vid...one of the most greatest splunk features

[@harshanharidasan1649]

Good one !

[@torreydale]

Do you still recommend the CIM validator or is the Splunk Add-on Builder sufficient?

[@__goyal__]

@bitsIO At 58:00 So should there be a threshold beyond which (like 75% or 80%) your model would be considered good?

[@cachemoneydotexe]

Have you actually used CIM Vladiator (validator)? Just wondering since it's a bit outdated - it uses CIM 4.3.0 fields, while CIM is currently at 4.19.0