Knowledge Management

CIM complaince indexes list

saikiran334
Explorer

I am wondering is there any method to list out CIM compliance indexes on demand through SPL query ?

Labels (1)
Tags (2)
0 Karma

richgalloway
SplunkTrust
SplunkTrust

If you're looking for the indexes related to the CIM app then you can use REST.

| rest /services/data/indexes | search title="cim_*" | dedup title

If you're looking for indexes that are CIM compliant, well, there is no such thing. Individual events can be CIM-compliant, but not an index itself.

---
If this reply helps you, Karma would be appreciated.
0 Karma

PavelP
Motivator

Hello @saikiran334

please check this app: https://splunkbase.splunk.com/app/2968/ SA-cim_validator

Let me know if it is what you're looking for

alt text

0 Karma
Get Updates on the Splunk Community!

Threat Hunting Unlocked: How to Uplevel Your Threat Hunting With the PEAK Framework ...

WATCH NOWAs AI starts tackling low level alerts, it's more critical than ever to uplevel your threat hunting ...

Splunk APM: New Product Features + Community Office Hours Recap!

Howdy Splunk Community! Over the past few months, we’ve had a lot going on in the world of Splunk Application ...

Index This | Forward, I’m heavy; backward, I’m not. What am I?

April 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...