CCX Add-on for Snowflake

CCX Security Operations has taken it upon ourselves to develop a CCX Add-on for Snowflake to provide CIM compliance coverage for logs ingested via HEC (JSON) and Generic S3 input leveraging Splunk Add-on for AWS. This TA was built using a large dataset and endeavours to be the most CIM compliant comprehensive field extraction for Snowflake JSON logs.Built by Henrique Linsmeyer

Default Version 1.0.5

May 13, 2026

Compatibility

Splunk Enterprise, Splunk Cloud

Platform Version: 10.5, 10.4, 10.3, 10.2, 10.1, 10.0, 9.4

CIM Version: 8.x, 6.x, 5.x

Rating

(0)

Support

Not Supported

CyberCX is Australia’s greatest force of cyber security experts. Our highly skilled professional services team operates a 24x7 on-shore security operations centre (SOC) servicing corporate and public sector organisations across Australia and New Zealand, specialising in Security Operations services leveraging Splunk.