I made this tool based on the experience I made while developing TAs with CIM compatibility. The goal of this tool is very simple: It brings all the Information you need to create CIM compliance TA or check an existent TA at one single point. That´s one main problem, to find all needed information because they are widely scattered, but the SA CIM developers do a great job and documented they work right in the data models. In addition, the apparently confusing logic of the CIM makes it hard to find a clear way to find all the relevant field mappings. The funny story is that CIM tries to normalize the Information and itself is full of redundancies und and double field names with different meanings. Of course, there is a leeway between being precise and a global view. This tool can help you balancing on the line. The CIM Buddy shows you which fields are relevant while you develop a TA with CIM compatibility and present the result of your development. You can examine if your fields are mapped correctly, if tagging works or what the SA CIM searches write into the data model. Watch the Walk Through in the main app folder.
(0)
Categories
Created By
Type
Downloads
Licensing
Splunk Answers
Resources