Cato Networks CIM Add-on for Splunk

Cato Networks provides a cloud-native, single-vendor SASE platform that converges networking and security in a global cloud service. The Cato Networks CIM Add-on for Splunk normalizes Cato platform events and flow telemetry to the Splunk Common Information Model (CIM). This add-on enables Cato telemetry to integrate seamlessly with CIM-based applications such as Splunk Enterprise Security. It provides field extractions, tags, and data model mappings for the following CIM data models: • Network Traffic • Intrusion Detection • Network Resolution (DNS) • Web • Authentication • Malware • Change (Account Management)