Does anybody know if there are pre-defined or common data models that are documented somewhere that could be used as a guide to assist with building data models for those of us who are less familiar with that process?
For example, I would think there are numerous common data sources where a basic guide could be created to walk users who are new to Splunk 6 through the process of building a usable data model.
These common data sources could include things such as:
These are just a few, but it could be useful as a starting point to get users familiar with the process of creating and using data models in Splunk 6.
Thank you,
Rick
Check out the Splunk Common Information Model app here:
http://apps.splunk.com/app/1621/
See the documentation here:
http://docs.splunk.com/Documentation/CIM/latest/User/RelationshipofCIMappstodata
Let us know what other data sources you would like to see data models for.